OpenSSL vulnerability may affect FreeRADIUS

Alan DeKok aland at deployingradius.com
Fri Sep 22 23:25:26 CEST 2006


http://www.openssl.org/news/secadv_20060905.txt

  From my preliminary reading, this may only affect people using
EAP-TLS.  PEAP and EAP-TTLS do not validate certificates on the server
side, so they may not be vulnerable.

  Still, it's probably worth upgrading OpenSSL.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog



More information about the Freeradius-Users mailing list