eap module change between 2.1.11 & 2.1.12 ?

Phil Mayers p.mayers at imperial.ac.uk
Tue Oct 25 17:37:58 CEST 2011


On 25/10/11 16:10, Fred wrote:

>      cache {
> 	enable = no
> 	lifetime = 6
> 	max_entries = 8192
> 	name = "A"
>      }
>     }
> rlm_eap: SSL error error:140DB111:SSL
> routines:SSL_CTX_set_session_id_context:ssl session id context too
> long

I don't know why this isn't working. The un-patched 2.1.12 code builds 
the "session id context" as:

"FreeRADIUS EAP-TLS %s" eap->tls->cache->name

If "name" is a one-char string, that should be <32 characters which is 
the value of SSL_MAX_SSL_SESSION_ID_LENGTH (on my system).

Sorry. Can't help. Try the patch and see if it works.

Maybe this isn't your problem; are you SURE it works using the EXACT 
same config under 2.1.11?



More information about the Freeradius-Users mailing list