I'm updating my FreeRADIUS environment to RHEL 10 using the RHEL-provided FreeRADIUS 3.2.8 package and the default OpenSSL version (3.5.5). For the most part, everything is working as it did before, but I have one admittedly very old MacBook Air running Sierra 10.12.6 that no longer works in the new environment. FreeRADIUS is reporting SSL/TLS errors. Long story short, I found I could get it working by lowering what appear to be some of the new minimum SSL/TLS requirements: OS: update-crypto-policies --set LEGACY FreeRADIUS: tls_min_version = "1.0" FreeRADIUS: cipher_list = "DEFAULT@SECLEVEL=0" I had to drop it all the way back to TLS 1.0 for this client to work. While researching, I noticed that even this older version of macOS should (?) support TLS 1.2, so I'm trying to understand why it no longer works. My previous FreeRADIUS server was running on RHEL 7 with FreeRadius 3.0.13 and OpenSSL 1.0.2. I'm also wondering what kind of security impact there would be if I left these settings in place. We are a large BYOD environment with many different types of clients, and I don't know how many other devices may have similar compatibility issues. -Mike