Status of 2.1.11/OSCP Implementation
Hello Alan/Hello List, on Nov 19, 2010 you wrote: Alex Bergmann wrote:
Back in 2004 I've finished my diploma thesis covering OCSP integration in the EAP/TLS module of freeRADIUS. Unfortunately I never posted the patch. To get this burden off me, I've dug through the code again, did some final adjustment and just finished the patch for the v2.1.x branch.
This is very useful!
I've added a new subsection inside the eap/tls configuration that makes it able to set the following settings. (A detailed description can be found in the patch.)
I'll take a look, and make sure it goes in for 2.1.11.
I'm aware that the EAP/TLS module was extended with a verify section that states OCSP explicitly. Nevertheless I would like to see this functionality implemented directly into the rlm_eap_tls module.
Yes, this is a good option to have. Alan DeKok. Do you already have an estimated release date (besides "when it's done") for 2.1.11? I would love to test out that feature! -- Mit freundlichen Grüßen/With Kind Regards Rudolph Bott
Rudolph Bott wrote:
Do you already have an estimated release date (besides "when it's done") for 2.1.11? I would love to test out that feature!
See http://git.freeradius.org, v2.1.x branch. You can test it now. Alan DeKok.
Hi Alan, On 08.03.2011 18:13, Alan DeKok wrote:
Rudolph Bott wrote:
Do you already have an estimated release date (besides "when it's done") for 2.1.11? I would love to test out that feature!
See http://git.freeradius.org, v2.1.x branch. You can test it now.
Thanks - I will try it out during the next days. But let me rephrase my initial question: Would you consider this feature stable?
Alan DeKok.
-- Mit freundlichen Grüßen / With Kind Regards Rudolph Bott
Alan DeKok <aland@deployingradius.com> wrote:
But let me rephrase my initial question: Would you consider this feature stable?
Try it and see. This isn't commercial software with dozens of people in the QA department. *You* are the QA department.
I was under the general impression that QA is no longer done for commercial software either... Sorry, couldn't resist. Cheers -- Alexander Clouter .sigmonster says: BOFH excuse #189: SCSI's too wide.
heh On Wed, Mar 9, 2011 at 3:29 AM, Alan Buxey <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
in the QA department. *You* are the QA department.
I was under the general impression that QA is no longer done for commercial software either...
ha! yes, i agree :-)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (5)
-
Alan Buxey -
Alan DeKok -
Alexander Clouter -
Ben Wiechman -
Rudolph Bott