I have been working with FreeRadius and reading these threads for sometime now trying to figure out how to properly configure and implement EAP-TLS using ECDHE-ECDSA ciphers.  

So far, I have been unsuccessful with the TLS handshake properly accepting.  I realize that FreeRadius does not work with encryption, but rather passes it off to OpenSSL to do it's "thing."  

I am writing because perhaps there is a FreeRadius setting/ concept that I have been foolishly neglecting.

The client (wpa_Supplicant) sends FreeRadius a Client Hello over TLS 1.0  (could perhaps cause problems with ECC?) and then FreeRadius Rejects it because of and "SSL3_CLIENT_HELLO: no shared cipher."  However, I have confirmed that the latest version of openssl supports my cipher.  

Does the EAP.conf/ FR have anything to do with Elliptic Curve's and their shared cipher besides putting in "ALL" for the cipher and "secptxxx" for the curve?

I have also confirmed through OpenSSL's   s_client/ s_server   program that my certificates are set up properly and ONLY succeed with TLS1_2 and not TLS1.0 or TLS1.1.

Thank you for any assistance!  I have been scratching my head with this for quite sometime.

v/r

Max