Mac OS X EAP-TLS with wrong usename kills freeradius when check_cert_cn is set

[Alan DeKok]

Miika Räisänen wrote:
> Heres coredump gdb logfile
> http://cc.oulu.fi/~mraisane/tmp/gdb-radiusd.log

  Well, that's pretty clear:

#0  0x00e97899 in cbtls_verify (ok=1, ctx=0xbff1e330) at rlm_eap_tls.c:257
...
	handler = (EAP_HANDLER *) 0x1

  That's not a valid pointer.  It looks like the handler is being freed
somewhere.

  Try the following patch, and run the server in debugging mode.  It
won't fix the problem, but it might help track down where/why the server
is freeing an EAP session that's still in the middle of doing SSL.

  Alan DeKok.
--
  http://deployingradius.com       - The web site of the book
  http://deployingradius.com/blog/ - The blog
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: eap.patch
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20070119/634a1c7f/attachment.ksh>