TLS failure reason as attribute

Arran Cudbard-Bell a.cudbardb at
Tue Oct 4 11:54:47 CEST 2016

> On 4 Oct 2016, at 09:17, Anirudh Malhotra <8zero2ops at> wrote:
> Hi,
> Is there a way to get the TLS failure reason(expired,revoked, invalid like
> one in the log below) in one of the attributes to be used in linelog? or do
> I have to check everything manually(unlang) using TLS attributes.

In >= 3 you can use Module-Failure-Message


Arran Cudbard-Bell <a.cudbardb at>
FreeRADIUS Development Team

FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

More information about the Freeradius-Users mailing list