ERROR: TLS Alert write:fatal:protocol version

[Jochem Sparla]

Set

   cipher_list = "DEFAULT at SECLEVEL=1"

to fix this.

Jochem



IOLAN B.V. • Mon Plaisir 26 • 4879 AN Etten-Leur • The Netherlands
T +31 (0)76 50 26 100 • F +31 (0)76 50 26 199
E iolan at iolan.com • I http://www.iolan.com/

De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend
bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u
verzocht de inhoud niet te gebruiken en de afzender direct te informeren door
het bericht te retourneren.
The information contained in this message may be confidential and is
intended to be exclusively for the addressee. Should you receive this message
unintentionally, please do not use the contents here in and notify the sender
immediately by return e-mail.

-----Oorspronkelijk bericht-----
Van: Freeradius-Users [mailto:freeradius-users-bounces+j.sparla=iolan.com at lists.freeradius.org] Namens Christoph Litauer
Verzonden: donderdag 1 juli 2021 13:24
Aan: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>; Alan Buxey <alan.buxey at gmail.com>
Onderwerp: Re: ERROR: TLS Alert write:fatal:protocol version

Thanks Alan,

already tried to set tls_max_version to 1.3 (not recommended), no change.

> Am 01.07.2021 um 12:52 schrieb Alan Buxey <alan.buxey at gmail.com>:
>
> hi,
>
> look at your logs:
>
> (197) eap_peap: <<< recv TLS 1.3  [length 0062]
>      ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>
> (197) eap_peap: >>> send TLS 1.0 Alert [length 0002], fatal protocol_version
>
>
> now look at your config
>
>
>                tls_min_version = "1.0"
>                tls_max_version = "1.2"
>               ^^^^^^^^^^^^^^^^^^
>
>
> is that the hint you needed?
>
> alan
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


--
Freundliche Grüße
Christoph Litauer
_________________________________________
Uni Koblenz, Rechenzentrum, Raum A 022
Postfach 201602, 56016 Koblenz
Fon: +49 261 287-1311, Fax: -100 1311






-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html