26 Jun
2015
26 Jun
'15
8:43 a.m.
On Jun 26, 2015, at 2:05 AM, Stefan Winter <stefan.winter@restena.lu> wrote:
Then again, if it gets filtered out, then the server should ship with a sane default, right? Looks like the current default isn't:
raddb/mods-available/eap -> tls-common: fragment_size = 1024
That default works. IIRC, it used to be larger, and things broke.
(and the preceding documentation text speaks about "half of 4096")
Here's a pull request:
If it works for you, we can look at changing the defaults. But I’m not going to do that in the main FR release until I know it won’t break peoples systems. Alan DeKok.