New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZxlq6AAoJEH0Oec13Yh7NSk4H/2uJxPmgXNZVB4kqFFEqt5W5 AuEb5TTGP4BIIdVnC8nAhZxh88+COERh/lFXqaLJK9HWES8YzLDmWcX/HGBv+H+o 8wosaGo3qzWu//NIgYVYih9rpNJsnN/phpUbGJsFMhKWfjSZQID/ie9Zy2FBiNde DW+MJgT3YtnNw8Ap0LwuVAL4/Qbo3jFlNTJovGA31kiSZ9AFwIpkL6f4Vyjz5Y3d NmBweF6E7w3MdeNihUQwnaOVl+Dqgt03fcm5y0hIDWmd4BUpGgzH3hyb7H3YYtou 956p0qQjOqb8gqaDpJf1wsD55xtoJjuijiizAAY5Tt5SWshPKjgmVkAprHWBm7I= =/OU7 -----END PGP SIGNATURE----- be more forgiving about max/min versions even if OpenSSL doesn't support them, we parse them, and then set "disable_tlsv*" manually. This lets the configuration be more generic, and common across all builds Alan T. DeKok@2017-09-23T12:58:54Z Files modified: * src/include/tls-h * src/main/tls.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/1219a7fc8246fabd554d2... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZxlc1AAoJEH0Oec13Yh7NuLoIAJLkN1o/HKGzynDJultZMqad HUaq0wBJYgthUc77rfEOqrQozB0jUv4T71BuXnftc+e5URg41t8K0IDVQV1R349l 1tya4Eza+UeIb+kf2XKDJR9IHawNET3iQmm11t5YGSWB8WQ4wCZ7Ty8/MVaQudio OHMRl7vqkESyOIj8VqePn2+aRGsr/0IJ4NRB6iYzjKEUQYZ40jp6Nk4//qpeKPpB E1JtHBuBCK5Kz63MLg+WMcu3U5kL59/+0NwHodtn8y/nVMNkS+PaiEb3Xy/C8t7T +20RVndB7HGjb9mi5jSMnp8mg22aSS6ByydDyKBaV+XPd55YHbxhD9LaSTVsKL0= =3Y82 -----END PGP SIGNATURE----- suppress bad error for EAP-FAST instead of printing a message saying to ignore it Alan T. DeKok@2017-09-23T12:44:20Z Files modified: * src/modules/rlm_eap/libeap/eap_tls.c * src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/9cd17e3a07fe85765ebcd... ====== gpgsig -----BEGIN PGP SIGNATURE----- iQEcBAABCAAGBQJZxb2oAAoJEH0Oec13Yh7NbOAH/AsPrCkGacAIsk1j2wANmjXG +yjFFJphvpxxRocxs7cRj5vNha/ZAmCY0+V+DD0JTG+2bc5LnSOaVDcUTS/dwCha rr2SK3HexY8+0lH1bZ1qVDFEgc70RKY/dPlc397ol+iWP5NLkHs9xmSxsWMjKdRF w0HL2ZMgzgzS6rIw6g0ldEq9mFJBWUhYYccZLOnDCwjBUEzIwTh9KhesFoLy1bKA a/H+P5c3iF/t8QrHw1JQIDejNgdSsH3Cr4MKyWyVOI9fz9ib+/9lG3wgzFcb030I AuKJzO5Z28XnzgdgVN/Epfcz8vsRYoHZZPbsxJjAmhemgzVWZuufSMXQfyu2Gkw= =4QC5 -----END PGP SIGNATURE----- EAP-FAST: Fix EAP-FAST-MSCHAPv2 in anonymous tunnel (v3.0.x) According to RFC 5422, in anonymous FAST tunnel the mschapv2 challenge is generated differently, from the phase1 exchange. While the eap-fast module takes care to save internally the peer-challenge to use, no one cares to read it before doing the mschap check, causing it to fail. Fix this by checking for PW_MS_CHAP_PEER_CHALLENGE and using it. Signed-off-by: Isaac Boukris <iboukris@gmail.com> Isaac Boukris (via Alan T. DeKok)@2017-09-23T01:49:28Z Files modified: * src/modules/rlm_mschap/rlm_mschap.c Commit diff: https://github.com/FreeRADIUS/freeradius-server/commit/63991e012de1d5f0bda3a... ====== -- This commit summary was generated @2017-09-24T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).