hi, have you stripped the secret from your private key ? I see no call for the private key passphrase in your config) I think this is some nice protocol mismatch going on - SSLv2 being negotiated when v3 expected or somesuch. I would suggest running in higher debug mode to see whats going on on that connection but maybe use a tighter CIPHER_LIST to avoid old methods anyway - "HIGH" is a good starting point if you have control over clients. alan On Fri, 23 Aug 2019 at 11:20, Sharma, Nitin via Freeradius-Users <freeradius-users@lists.freeradius.org> wrote:
Hello Guys,
I started seeing below errors related to TLS.
``` Fri Aug 23 09:57:32 2019 : Error: tls: Failed in proxy receive Fri Aug 23 09:57:32 2019 : Error: tls: error:140F3042:SSL routines:ssl_undefined_const_function:called a function you should not call Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140F3042:SSL routines:ssl_undefined_const_function:called a function you should not call Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140F3042:SSL routines:ssl_undefined_const_function:called a function you should not call Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140F3042:SSL routines:ssl_undefined_const_function:called a function you should not call Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init Fri Aug 23 09:57:32 2019 : Error: tls: error:140E0197:SSL routines:SSL_shutdown:shutdown while in init ```
Any suggestion on this will really help.
Thanks & Regards, Nitin Sharma
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html