Hello, I tried 3.0.4 rc0 radius/tls function. FR segfault during new tls connection to server. 136 ssn->ctx = conf->ctx; (gdb) 138 SSL_CTX_set_mode(ssn->ctx, SSL_MODE_ACCEPT_MOVING_WRITE_BUFFER | SSL_MODE_AUTO_RETRY); (gdb) 140 ssn->ssl = SSL_new(ssn->ctx); (gdb) 147 SSL_set_msg_callback(ssn->ssl, cbtls_msg); (gdb) 140 ssn->ssl = SSL_new(ssn->ctx); (gdb) 147 SSL_set_msg_callback(ssn->ssl, cbtls_msg); (gdb) 148 SSL_set_msg_callback_arg(ssn->ssl, ssn); (gdb) 149 SSL_set_info_callback(ssn->ssl, cbtls_info); (gdb) 154 DEBUG2("Requiring Server certificate"); (gdb) Requiring Server certificate 157 SSL_set_verify(ssn->ssl, verify_mode, cbtls_verify); (gdb) 159 SSL_set_ex_data(ssn->ssl, FR_TLS_EX_INDEX_CONF, (void *)conf); (gdb) 160 SSL_set_ex_data(ssn->ssl, FR_TLS_EX_INDEX_SSN, (void *)ssn); (gdb) 161 SSL_set_fd(ssn->ssl, fd); (gdb) 162 if (SSL_connect(ssn->ssl) <= 0) { (gdb) Program received signal SIGSEGV, Segmentation fault. radlog_request (type=type@entry=L_DBG, lvl=lvl@entry=L_DBG_LVL_2, request=request@entry=0x0, msg=0x444852 "%s: %s") at src/main/log.c:701 701 if (request->log.func == NULL) return; (gdb) [Thread 0x7fffeecd4700 (LWP 32743) exited] [Thread 0x7fffef4d5700 (LWP 32742) exited] [Thread 0x7fffefcd6700 (LWP 32741) exited] [Thread 0x7ffff04d7700 (LWP 32740) exited] [Thread 0x7ffff0cd8700 (LWP 32739) exited] Program terminated with signal SIGSEGV, Segmentation fault. The program no longer exists. Best regards Polish On Sat, 24 May 2014, Arran Cudbard-Bell wrote:
A preview release of 3.0.4 is available here: https://github.com/FreeRADIUS/freeradius-server/archive/release_3_0_4_rc0.ta...
Were creating a release candidate for 3.0.4 as some of the modifications we needed to make to get attribute indexes and tags to work consistently, were spread throughout the code base, and we want to ensure that those changes have not had side effects.
In particular, those of you using CUI, may need to update your policies for them to work correctly, as the type of Chargeable-User-Identity is now an octets, meaning that any expansions which use it, will now print hexits instead of ascii.
The changelog so far is:
FreeRADIUS 3.0.4 Mon 12 May 2014 15:30:00 EDT urgency=medium Feature improvements * Home server "response_window" can now take fractions of a second. See proxy.conf. * radmin now supports "show module status", as the counterpart to "set module status" * Better indentation in debugging mode * Added dictionary ericsson.packet.ccore.networks
Bug fixes * make case-insensitive regular expressions work again. * Added tests for the above * A few more talloc parenting issues * Fix delayed proxy reply handling. Closes #637 * Fix OpenSSL initialization order when using RADIUS/TLS. Fixes #646 * Don't double-quote strings in debugging messages * Fix foreach / break. Fixes #639 * Chargeable-User-Identifier should be "octets" * Fix typo in mainconfig. Fixes #634 * More rlm_perl fixes. Fixes #635 * Free OpenSSL memory on clean exit. * Fix <attr>[0] !* ANY - Was removing all instances of <attr> * Fix case where multiple attributes were returned from LHS of mapping, as with rlm_ldap. Fixes #652 * Fix corner case in cursor where using fr_cursor_next_by_da after calling fr_cursor_remove may of resulted in a read of uninitialised memory. * Don't SEGV if all connections to a database server go away. Fixes #651. * Fix issue where <attr> -= <value> was not removing tagged instances of <attr> equal to <value> (only untagged). * Fix issue where tag values were not being set on attributes created with unlang/ldap update blocks.
Please test with your local configuration. If no issues are reported this will become the official 3.0.4 release.
If you do find issues, please open tickets @bugs.freeradius.org.
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2