Alan DeKok aland at
Wed Jan 4 16:30:12 CET 2017

On Jan 4, 2017, at 10:14 AM, Jonathan Gazeley <Jonathan.Gazeley at> wrote:
> Yes, we are using SSL. We're using the standard OpenLDAP package distributed with CentOS 7, which is built against libnss. Obviously I prefer to rebuild as little of the system as possible but I'm open to the idea of rebuilding OpenLDAP against OpenSSL if necessary.

  I would say it's necessary.  libnss has wrappers for OpenSSL functions, which means FreeRADIUS *may* accidentally use nss functions where it expects OpenSSL, or vice versa.

  Alan DeKok.

More information about the Freeradius-Users mailing list