reauth-problem with WPA2-tls

[Andreas Hartmann]

Alan DeKok schrieb:
> Andreas Hartmann wrote:
>> Now, I looked at the SSL-session_id.
>>
>> tls_session->ssl->session->session_id is empty when the data is saved to
>> the session.
>>
>> At the time the data is fetched from the session during reauth, the
>> session_id is not empty (means: there is another id).
> 
>   <shrug>  OpenSSL is weird.
> 
>   The fast re-auth worked when I tested it with TTLS && PEAP.  Others
> have tested it to work.


See http://bugs.freeradius.org/bugzilla/show_bug.cgi?id=81

It does not work for me. There seem to be problems with the
session-handling, which should be checked, explained and, if necessary,
fixed.

Until I don't have a comprehensibly explanation for the reported
session-ID behavior, the current version (and 2.1.8) of freeradius is
highly insecure.


Kind regards,
Andreas