4 Jan
2017
4 Jan
'17
10:30 a.m.
On Jan 4, 2017, at 10:14 AM, Jonathan Gazeley <Jonathan.Gazeley@bristol.ac.uk> wrote:
Yes, we are using SSL. We're using the standard OpenLDAP package distributed with CentOS 7, which is built against libnss. Obviously I prefer to rebuild as little of the system as possible but I'm open to the idea of rebuilding OpenLDAP against OpenSSL if necessary.
I would say it's necessary. libnss has wrappers for OpenSSL functions, which means FreeRADIUS *may* accidentally use nss functions where it expects OpenSSL, or vice versa. Alan DeKok.