dynamic-clients with TLS
Is it possible to use dynamic-clients with TLS? It does not seem to work. Dynamic-clients without TLS works and TLS itself seems to work. My NAS devices are over the internet and they get dynamic IPs from the ISPs but i use TLS for that added piece of security. Thanks, Stefanos
Stefanos Boglou wrote:
Is it possible to use dynamic-clients with TLS?
Not right now. Patches are welcome, though. It probably shouldn't be too hard to do.
It does not seem to work. Dynamic-clients without TLS works and TLS itself seems to work.
My NAS devices are over the internet and they get dynamic IPs from the ISPs but i use TLS for that added piece of security.
What did you configure? Did you put a "tls" sub-section in the main "client" section used by dynamic-clients? Alan DeKok.
Alan DeKok wrote:
Stefanos Boglou wrote:
Is it possible to use dynamic-clients with TLS?
Not right now. Patches are welcome, though.
It probably shouldn't be too hard to do.
I am not too experienced with Radius itself so I do not think I can contribute to that.
It does not seem to work. Dynamic-clients without TLS works and TLS itself seems to work.
My NAS devices are over the internet and they get dynamic IPs from the ISPs but i use TLS for that added piece of security.
What did you configure? Did you put a "tls" sub-section in the main "client" section used by dynamic-clients? Nah. Nothing fancy. Just two completely independent configurations. One for TLS and one for dynamic-clients.
Alan DeKok.
Thanks -- VFXCode
Stefanos Boglou wrote:
What did you configure? Did you put a "tls" sub-section in the main "client" section used by dynamic-clients? Nah. Nothing fancy. Just two completely independent configurations. One for TLS and one for dynamic-clients.
Then I think you didn't test TLS with dynamic clients. Alan DeKok.
It seems I was trying to solve my problem the wrong way. Instead of using dynamic-clients I just specified a radsec client with 0.0.0.0/0 ipaddr. Seems that CIDR is allowed there and tests showed it to work as expected. This requires all the NAS to connect to the same server directive. My current setup is like that with FreeRadius 2.x and radsecproxy on localhost. I will revisit this however after my university exams are over and I have more free time to work on it. Thanks guys :) On Mon, Jun 9, 2014 at 7:00 PM, <A.L.M.Buxey@lboro.ac.uk> wrote:
Hi,
Nah. Nothing fancy. Just two completely independent configurations. One for TLS and one for dynamic-clients.
..then dynamic clients cant be TLS - give it a try :-)
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- VFXCode
participants (3)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
Stefanos Boglou