Warning about OpenSSL 1.0.2

Alain Péan alain.pean at lpn.cnrs.fr
Mon Oct 12 13:50:16 CEST 2015


Le 11/10/2015 23:27, Alan DeKok a écrit :
>> Would you mind to wait until Ubuntu 16.04 release (LTS) before dropping support for 2.2.x ?
>    Debian / Ubuntu are free to package software which is a decade old an unmaintained.  They do it with multiple other RADIUS servers.  Why be different for FreeRADIUS?
>
>> >I am using at this time Ubuntu 14.04, and am hoping to upgrade to FR 3.x when Ubuntu 16.04 is released (with the hope that FR 3.x will be included in standard ubunytu repository then).
>    Perhaps hell will freeze over, and Debian will upgrade to a recent version of the server.

I have also the option to switch to CentOS (RHEL) 7. It seems that 
freeradius is version 3.0.4 there :
[root at centos-test ~]# yum info freeradius
....
Nom                 : freeradius
Architecture        : x86_64
Version             : 3.0.4
Révision            : 6.el7

In general, bug corrections are backported to previous (stable in RHEL) 
versions. I don't know if it is the case there ?

And openssl is version 1.0.1e :
...
Nom                 : openssl
Architecture        : x86_64
Date                : 1
Version             : 1.0.1e
Révision            : 42.el7.9

Alain

-- 
Administrateur Système/Réseau
Laboratoire de Photonique et Nanostructures (LPN/CNRS - UPR20)
Centre de Recherche Alcatel Data IV - Marcoussis
route de Nozay - 91460 Marcoussis
Tel : 01-69-63-61-34




More information about the Freeradius-Users mailing list