Re: 2.0.5 on Solaris, openssl 0.9.8h ---> does support sha256 ?
Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.
Hi Alan, I have applied below two patches (as I have seen somebody posted for freeradius 1.1.7) for freeradius 2.0.5 supporting sha256-rsa (the patches listed below as 1, and 2). After ./configure, make clean, make, and make install I ran ./radiusd -X, but getting symbol reference error as per below log (I have not rebuilt openssl): tls { rsa_key_exchange = yes dh_key_exchange = no rsa_key_length = 1024 dh_key_length = 1024 verify_depth = 2 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server_pvt.pem" certificate_file = "/usr/local/etc/raddb/certs/server_cert.pem" CA_file = "/usr/local/etc/raddb/certs/ServerRootCA.pem" dh_file = "/usr/local/etc/raddb/certs/DH" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no } ld.so.1: radiusd: fatal: relocation error: file /usr/local/lib/rlm_eap_tls-2.0.5.so: symbol openSSL_add_all_digests: referenced symbol not found Killed 1. freeradius-1.1.7/configure -LIBS="-lssl $LIBS" +LIBS="-lssl -lcrypto -ldl $LIBS" - OPENSSL_LIBS="$OPENSSL_LIBS -lcrypto -lssl -lcrypto" + OPENSSL_LIBS="$OPENSSL_LIBS -lcrypto -lssl -lcrypto -ldl" 2. freeradius-1.1.7/src/modules/rlm_eap/types/rlm_eap_tls/rlm_eap_tls.c SSL_library_init(); SSL_load_error_strings(); + OpenSSL_add_all_digests(); meth = TLSv1_method(); ctx = SSL_CTX_new(meth); Can you please help ? -- Rafiqul Ahsan
Hi, All! Why in freebsd ports freeradius with SNMP support uses ucd-snmp but not net-snmp port? Maxim.
Maxim Sirenko wrote:
Why in freebsd ports freeradius with SNMP support uses ucd-snmp but not net-snmp port?
Because the code in FreeRADIUS was written before net-snmp existed, and the code hasn't been updated. See the latest version from git for new SNMP support. Alan DeKok.
Hi Maxim, Alan and all, In message <489D587E.4080201@deployingradius.com>, Alan DeKok <aland@deployingradius.com> writes
Maxim Sirenko wrote:
Why in freebsd ports freeradius with SNMP support uses ucd-snmp but not net-snmp port?
Because the code in FreeRADIUS was written before net-snmp existed, and the code hasn't been updated.
I do read this list. However, when there's a FreeBSD problem, it can be worth checking the FreeBSD PRs as well. http://www.freebsd.org/cgi/query-pr.cgi?pr=115758 contains a full explanation of the current situation - though the title is somewhat cryptic, even if it was in English. Without UCD SNMP compatibility support in FreeBSD's Net SNMP port, the only option for FreeRADIUS built with SNMP support has to depend on UCD SNMP. The now obsolete FreeRADIUS SNMP code isn't that great - it's not 64 bit clean and it relies on the obsolete SMUX protocol. The new implementation that will appear in 2.0.6 is much better.
See the latest version from git for new SNMP support.
Hopefully it won't be too long until 2.0.6 is released; when it is released I'll update the net/freeradius2 port for the new SNMP support. As soon as I get time, I'll retrieve the current version of FreeRADIUS 2 from git, and get on with the necessary work in anticipation of 2.0.6 being released. Best wishes, David (FreeBSD net/freeradius and net/freeradius2 ports maintainer) -- David Wood david@wood2.org.uk
participants (5)
-
Alan DeKok -
David Wood -
Maxim Sirenko -
patrice.oliver＠ch-beaune.fr -
Rafiqul Ahsan