Connection issues with Android Marshmallow

[Arran Cudbard-Bell]

> On Oct 15, 2015, at 2:31 PM, Paolo Barbato <paolo.barbato at igi.cnr.it> wrote:
> 
>> 
>> On 15 ott 2015, at 19:58, Alan DeKok <aland at deployingradius.com> wrote:
>> 
>> On Oct 15, 2015, at 1:28 PM, Tod A. Sandman <sandmant at rice.edu> wrote:
>>> 
>>> Android users here who have upgraded to Marshmallow can no longer connect, even after I upgraded from freeradius-2.2.8 to freeradius-2.2.9.  My server is RHEL6.4 with "OpenSSL 1.0.1e-fips 11 Feb 2013".  We are using PEAP/EAP-MSCHAPv2.
>> 
>> You should update your eap.conf to disable tls 1.2:
>> 
>> eap {
>> 	...
>> 	tls {
>> 		...
>> 		disable_tlsv1_2= yes
>> 		...
>> 	}
>> }
>> 
>> That will likely help.
>> 
>> This feature was added for situations like this.  :( And not documented because we hoped it was never needed.
>> 
> 
> Well done anyway ! They say "Better safe than sorry”.
> 
> Alan is this undocumented rule available also in FR 3.x ?

Yes, and v3.1.x too.

-Arran
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 842 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20151015/c7c360a4/attachment.sig>