Set cipher_list = "DEFAULT@SECLEVEL=1" to fix this. Jochem IOLAN B.V. • Mon Plaisir 26 • 4879 AN Etten-Leur • The Netherlands T +31 (0)76 50 26 100 • F +31 (0)76 50 26 199 E iolan@iolan.com • I http://www.iolan.com/ De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u verzocht de inhoud niet te gebruiken en de afzender direct te informeren door het bericht te retourneren. The information contained in this message may be confidential and is intended to be exclusively for the addressee. Should you receive this message unintentionally, please do not use the contents here in and notify the sender immediately by return e-mail. -----Oorspronkelijk bericht----- Van: Freeradius-Users [mailto:freeradius-users-bounces+j.sparla=iolan.com@lists.freeradius.org] Namens Christoph Litauer Verzonden: donderdag 1 juli 2021 13:24 Aan: FreeRadius users mailing list <freeradius-users@lists.freeradius.org>; Alan Buxey <alan.buxey@gmail.com> Onderwerp: Re: ERROR: TLS Alert write:fatal:protocol version Thanks Alan, already tried to set tls_max_version to 1.3 (not recommended), no change.
Am 01.07.2021 um 12:52 schrieb Alan Buxey <alan.buxey@gmail.com>:
hi,
look at your logs:
(197) eap_peap: <<< recv TLS 1.3 [length 0062] ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
(197) eap_peap: >>> send TLS 1.0 Alert [length 0002], fatal protocol_version
now look at your config
tls_min_version = "1.0" tls_max_version = "1.2" ^^^^^^^^^^^^^^^^^^
is that the hint you needed?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Freundliche Grüße Christoph Litauer _________________________________________ Uni Koblenz, Rechenzentrum, Raum A 022 Postfach 201602, 56016 Koblenz Fon: +49 261 287-1311, Fax: -100 1311 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html