Phil Mayers wrote:
So, I've just compiled up the current "master", and a few things stand out. Using my existing 2.1.12 config:
1. EAP-TTLS/MSCHAP doesn't seem to work any more; the MS-CHAP challenge/response are wrong. PEAP works fine. Haven't looked into this yet.
Ugh. Segv. The SSL session variable is NULL. :( It looks like the "free session" code is being called before the "generate MPPE keys" code.
2. rlm_eap_tls now mandates "private_key_password" even if the key is not encrypted on disk. You can specify anything - but you must specify it. Behaviour change, but not particularly onerous.
I'll take a look.
3. Fast Session resumption seems to give a segfault - request_finish calls pairfree on process.c:1085 and the value seems to be corrupt. The backtrace is a bit useless, since most of the values are optimised out (grr gcc) but I will try to get more info.
Edit Make.inc, delete CFLAGS ... "-O2" Alan DeKok.