Hi All, I've added some additional validation for EAP-TLS that caps the maximum inbound TLS record size at the length indicated in the first (L) Length Included packet. If you're using v3.0.x and EAP-TLS could you please check to make sure this isn't tripped by any of the supplicants in use at your site. I've tested with OSX 10.10.3, and IOS 8.3, and will test with wpa_supplicant/eapol_test but don't have access to all the different Windows variants. Thanks, -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On Mon, Jun 08, 2015 at 11:39:54AM -0400, Arran Cudbard-Bell wrote:
I've tested with OSX 10.10.3, and IOS 8.3, and will test with wpa_supplicant/eapol_test but don't have access to all the different Windows variants.
Wonder if there's a small chance of it being disruptive (and knowing it's unlikely to get tested with every possible supplicant before release), then is it worth a hidden option for at least a couple of releases to disable it in case it breaks anything for anyone? Matthew -- Matthew Newton, Ph.D. <mcn4@le.ac.uk> Systems Specialist, Infrastructure Services, I.T. Services, University of Leicester, Leicester LE1 7RH, United Kingdom For IT help contact helpdesk extn. 2253, <ithelp@le.ac.uk>
On 8 Jun 2015, at 11:50, Matthew Newton <mcn4@leicester.ac.uk> wrote:
On Mon, Jun 08, 2015 at 11:39:54AM -0400, Arran Cudbard-Bell wrote:
I've tested with OSX 10.10.3, and IOS 8.3, and will test with wpa_supplicant/eapol_test but don't have access to all the different Windows variants.
Wonder if there's a small chance of it being disruptive (and knowing it's unlikely to get tested with every possible supplicant before release), then is it worth a hidden option for at least a couple of releases to disable it in case it breaks anything for anyone?
Yeah I was thinking that. Ok i'll add something for the v3.0.x branch. -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
participants (2)
-
Arran Cudbard-Bell -
Matthew Newton