Re: Question regarding the direction of eap_tls: <<< recv and eap_tls: >>> send

On Nov 14, 2020, at 4:37 PM, Eric Nguyen <ericvunguyen@gmail.com> wrote:

I used eapol_test as a client/authenticator against FreeRADIUS 3.0.21.

- If I set the following parameters in the FreeRADIUS eap file, espol_test will results in a failure. In this case, "eap_tls: <<< recv TLS 1.3" looks like an exchange from FreeRADIUS to eapol_test (SERVER -> CLIENT):

tls_min_version = "1.3" tls_max_version = "1.3"

TLS 1.3 is not supported for any EAP method. There is no standard defined for using TLS 1.3. Don't use TLS 1.3. Alan DeKok.