TLS failure reason as attribute
Hi, Is there a way to get the TLS failure reason(expired,revoked, invalid like one in the log below) in one of the attributes to be used in linelog? or do I have to check everything manually(unlang) using TLS attributes. Tue Oct 4 12:24:26 2016 : ERROR: (9) eap_tls: ERROR: SSL says error 10 : certificate has expired Tue Oct 4 12:24:26 2016 : ERROR: (9) eap_tls: ERROR: TLS Alert write:fatal:certificate expired Tue Oct 4 12:24:26 2016 : Error: tls: TLS_accept: Error in SSLv3 read client certificate B Tue Oct 4 12:24:26 2016 : Auth: (9) Login incorrect (eap_tls: SSL says error 10 : certificate has expired): [abi] BR, Anirudh Malhotra Mail: 8zero2.in@gmail.com Facebook: www.facebook.com/8zero2 Twitter: @8zero2_in Blog: blog.8zero2.in
On 4 Oct 2016, at 09:17, Anirudh Malhotra <8zero2ops@gmail.com> wrote:
Hi,
Is there a way to get the TLS failure reason(expired,revoked, invalid like one in the log below) in one of the attributes to be used in linelog? or do I have to check everything manually(unlang) using TLS attributes.
In >= 3 you can use Module-Failure-Message -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
On Tue, Oct 4, 2016 at 3:24 PM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 4 Oct 2016, at 09:17, Anirudh Malhotra <8zero2ops@gmail.com> wrote:
Hi,
Is there a way to get the TLS failure reason(expired,revoked, invalid like one in the log below) in one of the attributes to be used in linelog? or do I have to check everything manually(unlang) using TLS attributes.
In >= 3 you can use Module-Failure-Message
oops, yeah It doesn't parse inner-tunnel in case of tls. and was searching
it in session-state BR, Anirudh Malhotra Mail: 8zero2.in@gmail.com Facebook: www.facebook.com/8zero2 Twitter: @8zero2_in Blog: blog.8zero2.in
participants (2)
-
Anirudh Malhotra -
Arran Cudbard-Bell