Poodle and EAP?

Nick Lowe nick.lowe at gmail.com
Mon Oct 20 15:24:04 CEST 2014


Incidentally, we now have TLS 1.2 in Windows for the relevant
EAP-types after the last round of Windows Updates, currently disabled
by default:

https://support.microsoft.com/kb/2977292

I am not quite sure why they don't default to 0xFC0 though for TLS
1.0, 1.1 and 1.2 support.

Are there really EAP-terminating RADIUS servers out there that baulk
on a TLS 1.1 or 1.2 Client Hello, not responding with TLS 1.0 where
the newer protocol versions are not supported?


More information about the Freeradius-Users mailing list