OpenSSL vulnerability may affect FreeRADIUS
Alan DeKok
aland at deployingradius.com
Fri Sep 22 23:25:26 CEST 2006
http://www.openssl.org/news/secadv_20060905.txt
From my preliminary reading, this may only affect people using
EAP-TLS. PEAP and EAP-TTLS do not validate certificates on the server
side, so they may not be vulnerable.
Still, it's probably worth upgrading OpenSSL.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius.com/blog/ - The blog
More information about the Freeradius-Users
mailing list