Re: Add TLS version to logs with linelog in FreeRADIUS 3.2.4
Hi guys * another try, after failing to reach the mailing list for this topic with my email address * Coming back to this topic of TLS logging in FreeRADIUS 3.2.4, are there any news on this topic? I recently updated to FreeRADIUS 3.2.6, but TLS version is still missing. In the debug output (freeradius -X) I was missing the follwing attributes since 2.3.4: (10) update { (10) &reply::Framed-MTU += &session-state:Framed-MTU[*] -> 1014 ... (10) &reply::TLS-Session-Cipher-Suite += &session-state:TLS-Session-Cipher-Suite[*] -> 'ECDHE-RSA-AES256-GCM-SHA384' (10) &reply::TLS-Session-Version += &session-state:TLS-Session-Version[*] -> 'TLS 1.2' Thanks and regards Dominic
On Nov 15, 2024, at 8:07 AM, Dominic Stalder <dominic.stalder@bluewin.ch> wrote:
* another try, after failing to reach the mailing list for this topic with my email address *
OK. I suspect the problem is your local mailing system then. No one else has issues.
Coming back to this topic of TLS logging in FreeRADIUS 3.2.4, are there any news on this topic?
I recently updated to FreeRADIUS 3.2.6, but TLS version is still missing.
In the debug output (freeradius -X) I was missing the follwing attributes since 2.3.4:
Please post the *full* debug output. If you look at src/main/tls.c, it adds that attribute when the debug output shows "Connection established". And, it prints out the attribute it's added. So as always, read the debut output. If you see TLS-Session-Version in the debug output, that's where it's available. If you don't see it, then the relevant bits of code aren't being run. Alan DeKok.
participants (2)
-
Alan DeKok -
Dominic Stalder