No TLS 1.2

David Ward daward at Brocade.COM
Fri Nov 18 01:51:02 CET 2016

Thanks. I think that is a common confusion; the ciphers classified as TLS1.x 
is different than the protocol TLS. I need to make sure we only negotiate to 
version TLS 1.0 in the hello message.


SSL Record Layer: Handshake Protocol: Client Hello

        Content Type: Handshake (22)

        Version: TLS 1.0 (0x0301)

        Length: 91

        Handshake Protocol: Client Hello

            Handshake Type: Client Hello (1)

            Length: 87

            Version: TLS 1.2 (0x0303)

From: Alan Buxey [mailto:A.L.M.Buxey at]
Sent: Thursday, November 17, 2016 4:43 PM
To: FreeRadius users mailing list <freeradius-users at>; 
David Ward <daward at Brocade.COM>; freeradius-users at
Subject: Re: No TLS 1.2

Modify the CIPHER list in the eap config file?


-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5913 bytes
Desc: not available
URL: <>

More information about the Freeradius-Users mailing list