Alan DeKok schrieb:
Andreas Hartmann wrote:
Now, I looked at the SSL-session_id.
tls_session->ssl->session->session_id is empty when the data is saved to the session.
At the time the data is fetched from the session during reauth, the session_id is not empty (means: there is another id).
<shrug> OpenSSL is weird.
The fast re-auth worked when I tested it with TTLS && PEAP. Others have tested it to work.
See http://bugs.freeradius.org/bugzilla/show_bug.cgi?id=81 It does not work for me. There seem to be problems with the session-handling, which should be checked, explained and, if necessary, fixed. Until I don't have a comprehensibly explanation for the reported session-ID behavior, the current version (and 2.1.8) of freeradius is highly insecure. Kind regards, Andreas