TLS failed loading legacy provider
I am working on building FreeRADIUS (v3.2.2) and OpenSSL (v3.3) separately with cmake files. After compilations done, I am getting an error "Error: (TLS) Failed loading legacy provider" when run radius server with "radiusd -Xx". I also looked with strace command to see any loading issue. It seems that it does not find the legacy.so library file. I also tried to give rpath with patchelf command to define the exact path of legacy.so which is created during openssl compilation. It still looks a different path which does not include the related legacy provider library (legacy.so). Do you have any suggestions?
On May 23, 2024, at 11:23 AM, Çağlar Karahan <karahancaglar94@gmail.com> wrote:
I am working on building FreeRADIUS (v3.2.2) and OpenSSL (v3.3) separately with cmake files. After compilations done, I am getting an error "Error: (TLS) Failed loading legacy provider" when run radius server with "radiusd -Xx".
Unfortunately this is a local OS issue. FreeRADIUS asks to load a library, and the OS says "no".
I also looked with strace command to see any loading issue. It seems that it does not find the legacy.so library file. I also tried to give rpath with patchelf command to define the exact path of legacy.so which is created during openssl compilation. It still looks a different path which does not include the related legacy provider library (legacy.so).
You can set LD_PRELOAD in raddb/radiusd.conf, "env" subsection. That causes the server to load the correct library (by exact filename). It should then work. Alan DeKok.
I have a NAS which is not capable of converting DHCPv6 requests from RG/host clients to RADIUS requests on one side and a RADIUS server which only handles RADIUS protocol on the other side. My use case looks like this one, but the NAS does not have the RADIUS client capability: https://www.rfc-editor.org/rfc/rfc6911#section-2 Would it be possible to configure freeradius 4 as the missing "bridge", where it would listen for DHCPv6 requests from NAS, convert them to RADIUS ones, send them to the other RADIUS server and on RADIUS response return appropriate DHCPv6 response to NAS? -- Ludo
On May 23, 2024, at 1:20 PM, Ľudovít Mikula <ludovit.mikula@mikori.sk> wrote:
I have a NAS which is not capable of converting DHCPv6 requests from RG/host clients to RADIUS requests on one side and a RADIUS server which only handles RADIUS protocol on the other side.
My use case looks like this one, but the NAS does not have the RADIUS client capability: https://www.rfc-editor.org/rfc/rfc6911#section-2
Would it be possible to configure freeradius 4 as the missing "bridge", where it would listen for DHCPv6 requests from NAS, convert them to RADIUS ones, send them to the other RADIUS server and on RADIUS response return appropriate DHCPv6 response to NAS?
v3 definitely doesn't do this. For the simple reason that it doesn't do DHCPv6. You may try the "master" branch. It supports DHCPv6. If it works, great. But it's in ongoing development and it might not build from day to day. Alan DeKok.
On 5/23/24 20:06, Alan DeKok wrote:
You may try the "master" branch. It supports DHCPv6. If it works, great. But it's in ongoing development and it might not build from day to day.
Thank you Alan, understood. I just wanted to check whether it's possible at all with master branch. -- Ludo
On May 23, 2024, at 4:19 PM, Ľudovít Mikula <ludovit.mikula@mikori.sk> wrote:
Thank you Alan, understood. I just wanted to check whether it's possible at all with master branch.
It should be possible. You'll have to put the pieces together yourself, as this use-case isn't documented. But if you do get it working, we're happy to integrate examples into the server. Alan DeKok.
participants (3)
-
Alan DeKok -
Çağlar Karahan -
Ľudovít Mikula