Commit report for v3.0.x branch

[announce at freeradius.org]

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server)

======
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxlq6AAoJEH0Oec13Yh7NSk4H/2uJxPmgXNZVB4kqFFEqt5W5
 AuEb5TTGP4BIIdVnC8nAhZxh88+COERh/lFXqaLJK9HWES8YzLDmWcX/HGBv+H+o
 8wosaGo3qzWu//NIgYVYih9rpNJsnN/phpUbGJsFMhKWfjSZQID/ie9Zy2FBiNde
 DW+MJgT3YtnNw8Ap0LwuVAL4/Qbo3jFlNTJovGA31kiSZ9AFwIpkL6f4Vyjz5Y3d
 NmBweF6E7w3MdeNihUQwnaOVl+Dqgt03fcm5y0hIDWmd4BUpGgzH3hyb7H3YYtou
 956p0qQjOqb8gqaDpJf1wsD55xtoJjuijiizAAY5Tt5SWshPKjgmVkAprHWBm7I=
 =/OU7
 -----END PGP SIGNATURE-----

be more forgiving about max/min versions

even if OpenSSL doesn't support them, we parse them, and then
set "disable_tlsv*" manually.  This lets the configuration be
more generic, and common across all builds

Alan T. DeKok at 2017-09-23T12:58:54Z
Files modified:
	* src/include/tls-h
	* src/main/tls.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/1219a7fc8246fabd554d26ff861e345bf7fb7e26
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxlc1AAoJEH0Oec13Yh7NuLoIAJLkN1o/HKGzynDJultZMqad
 HUaq0wBJYgthUc77rfEOqrQozB0jUv4T71BuXnftc+e5URg41t8K0IDVQV1R349l
 1tya4Eza+UeIb+kf2XKDJR9IHawNET3iQmm11t5YGSWB8WQ4wCZ7Ty8/MVaQudio
 OHMRl7vqkESyOIj8VqePn2+aRGsr/0IJ4NRB6iYzjKEUQYZ40jp6Nk4//qpeKPpB
 E1JtHBuBCK5Kz63MLg+WMcu3U5kL59/+0NwHodtn8y/nVMNkS+PaiEb3Xy/C8t7T
 +20RVndB7HGjb9mi5jSMnp8mg22aSS6ByydDyKBaV+XPd55YHbxhD9LaSTVsKL0=
 =3Y82
 -----END PGP SIGNATURE-----

suppress bad error for EAP-FAST

instead of printing a message saying to ignore it

Alan T. DeKok at 2017-09-23T12:44:20Z
Files modified:
	* src/modules/rlm_eap/libeap/eap_tls.c
	* src/modules/rlm_eap/types/rlm_eap_fast/rlm_eap_fast.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/9cd17e3a07fe85765ebcde91352f365ee2a8a0ad
====== 
gpgsig -----BEGIN PGP SIGNATURE-----
 
 iQEcBAABCAAGBQJZxb2oAAoJEH0Oec13Yh7NbOAH/AsPrCkGacAIsk1j2wANmjXG
 +yjFFJphvpxxRocxs7cRj5vNha/ZAmCY0+V+DD0JTG+2bc5LnSOaVDcUTS/dwCha
 rr2SK3HexY8+0lH1bZ1qVDFEgc70RKY/dPlc397ol+iWP5NLkHs9xmSxsWMjKdRF
 w0HL2ZMgzgzS6rIw6g0ldEq9mFJBWUhYYccZLOnDCwjBUEzIwTh9KhesFoLy1bKA
 a/H+P5c3iF/t8QrHw1JQIDejNgdSsH3Cr4MKyWyVOI9fz9ib+/9lG3wgzFcb030I
 AuKJzO5Z28XnzgdgVN/Epfcz8vsRYoHZZPbsxJjAmhemgzVWZuufSMXQfyu2Gkw=
 =4QC5
 -----END PGP SIGNATURE-----

EAP-FAST: Fix EAP-FAST-MSCHAPv2 in anonymous tunnel (v3.0.x)

According to RFC 5422, in anonymous FAST tunnel the mschapv2
challenge is generated differently, from the phase1 exchange.
While the eap-fast module takes care to save internally the
peer-challenge to use, no one cares to read it before doing
the mschap check, causing it to fail.
Fix this by checking for PW_MS_CHAP_PEER_CHALLENGE and using it.

Signed-off-by: Isaac Boukris <iboukris at gmail.com>

Isaac Boukris (via Alan T. DeKok)@2017-09-23T01:49:28Z
Files modified:
	* src/modules/rlm_mschap/rlm_mschap.c

Commit diff:
https://github.com/FreeRADIUS/freeradius-server/commit/63991e012de1d5f0bda3af84b37f5fb98d5cb4e3
====== 
-- 
This commit summary was generated @2017-09-24T00:00:01Z by lgfeed version 0.00 (https://github.com/arr2036/lgfeed).