"Ben Beuchler" <insyte@gmail.com> wrote:
I'm running FreeRADIUS 1.1.2 on Ubuntu. This morning one of the two servers stopped answering requests. The radius log contained thousands of lines like these:
Mon Oct 23 12:32:56 2006 : Error: TLS Alert write:fatal:illegal parameter Mon Oct 23 12:32:56 2006 : Error: TLS_accept:error in SSLv3 read certificate verify A Mon Oct 23 12:32:56 2006 : Error: rlm_eap: SSL error error:1408E098:SSL routines:SSL3_GET_MESSAGE:excessive message size
Hmm... looking at google: http://stunnel.mirt.net/pipermail/stunnel-users/2004-September/000037.html See also https://mail.internet2.edu/wws/arc/shibboleth-users/2004-01/msg00124.html Unfortunately, OpenSSL doesn't really give useful error messages.
Restarting radiusd fixed it.
That says to me there's a memory corruption issue.. maybe back-porting the thread locks from CVS head to 1.1.x would help. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog