Good luck on that. For Android 4.4: it may be compatible with TLS 1.1 and TLS 1.2 but some devices with Android 4.4.x may not support TLS 1.1 or higher. Beware that your not hunting ghosts..
-----Oorspronkelijk bericht----- Van: Freeradius-Users [mailto:freeradius-users-bounces+belle=bazuin.nl@lists.freerad ius.org] Namens Alan DeKok Verzonden: maandag 31 mei 2021 14:09 Aan: FreeRadius users mailing list Onderwerp: Re: [EXT] TLS 1.3
On May 31, 2021, at 7:54 AM, HERCEK, Marián <marian.hercek@ucm.sk> wrote:
1) it's very unlikely Android 4.4 supports TLS 1.3
For HTTPS. Not for EAP.
I *do* have some slight understanding of what's going on. What I find frustrating is people asking questions, and then arguing with the answers.
2) recv TLS 1.3 Handshake, ClientHello - does it belong to client (Android 4.4) or NAS (e.g. WiFi AP)?
The WiFi AP doesn't do EAP. So....
3) you mean I have to configure just tls_max_version and not tls_min_version?
Yes.
3.0.22 comes with the following defaults:
tls_min_version = "1.2" tls_max_version = "1.2"
Use that.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html