Use of SHA1 with RADIUS server

[Alan DeKok]

> On Jan 24, 2017, at 9:40 AM, Stefan Paetow <Stefan.Paetow at jisc.ac.uk> wrote:
> 
>> server code itself. I have to admit I've got no idea what the question
>> really is about though.
> 
> Hashing support? ;-)

  Open-ended questions like that just confuse me.  A better question is "Does FR support SHA2 *for a particular purpose*".

> Oh, and apparently (if I read rlm_expr.c correctly), FR *does* support SHA2 in the expression engine... any OpenSSL EVP_MD digest is supported (see line 1008 and beyond).
> 
> In the code that means SHA256 and SHA512 (according to mod_bootstrap anyway).

  Yes.  Lots of support for SHA2 for *multiple purposes*.  Password comparisons, etc.

  Otherwise, a bad answer to the bad question would be "Yes, FreeRADIUS supports SHA2".

  Alan DeKok.