So, I've just compiled up the current "master", and a few things stand out. Using my existing 2.1.12 config: 1. EAP-TTLS/MSCHAP doesn't seem to work any more; the MS-CHAP challenge/response are wrong. PEAP works fine. Haven't looked into this yet. 2. rlm_eap_tls now mandates "private_key_password" even if the key is not encrypted on disk. You can specify anything - but you must specify it. Behaviour change, but not particularly onerous. 3. Fast Session resumption seems to give a segfault - request_finish calls pairfree on process.c:1085 and the value seems to be corrupt. The backtrace is a bit useless, since most of the values are optimised out (grr gcc) but I will try to get more info. Will follow up with more as I figure out the cause(s)