On Aug 8, 2023, at 4:00 PM, James Wood via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
I rebuilt the server, did a fresh install of openssl 3.0.2 and libssl-dev (same version) and it started working with the same certs.
That's good.
After comparing the two, it appears that when freeradius was compiled, it chose an old openssl 1.x library and wasn't actually using the correct one at all. I don't know how that old version was on the box at time of compile (as well as 3.0.2) but once I'd removed 1.x and compiled again, it began working on the server.
Some recommendations: * don't build your own packages * don't install multiple versions of OpenSSL on the same system. Many things are likely to break * if your distribution has old versions of FreeRADIUS, then use the packages on http://packages.networkradius.com * use "radiusd -xv" to see which version of OpenSSL is being used by FreeRADIUS. Alan DeKok.