ERROR: TLS Alert write:fatal:protocol version

[Christoph Litauer]

Thanks a lot, that helped!

> Am 01.07.2021 um 14:14 schrieb Jochem Sparla <J.Sparla at iolan.com>:
> 
> Set
> 
>   cipher_list = "DEFAULT at SECLEVEL=1"
> 
> to fix this.
> 
> Jochem
> 
> 
> 
> IOLAN B.V. • Mon Plaisir 26 • 4879 AN Etten-Leur • The Netherlands
> T +31 (0)76 50 26 100 • F +31 (0)76 50 26 199
> E iolan at iolan.com • I http://www.iolan.com/
> 
> De informatie opgenomen in dit bericht kan vertrouwelijk zijn en is uitsluitend
> bestemd voor de geadresseerde. Indien u dit bericht onterecht ontvangt, wordt u
> verzocht de inhoud niet te gebruiken en de afzender direct te informeren door
> het bericht te retourneren.
> The information contained in this message may be confidential and is
> intended to be exclusively for the addressee. Should you receive this message
> unintentionally, please do not use the contents here in and notify the sender
> immediately by return e-mail.
> 
> -----Oorspronkelijk bericht-----
> Van: Freeradius-Users [mailto:freeradius-users-bounces+j.sparla=iolan.com at lists.freeradius.org] Namens Christoph Litauer
> Verzonden: donderdag 1 juli 2021 13:24
> Aan: FreeRadius users mailing list <freeradius-users at lists.freeradius.org>; Alan Buxey <alan.buxey at gmail.com>
> Onderwerp: Re: ERROR: TLS Alert write:fatal:protocol version
> 
> Thanks Alan,
> 
> already tried to set tls_max_version to 1.3 (not recommended), no change.
> 
>> Am 01.07.2021 um 12:52 schrieb Alan Buxey <alan.buxey at gmail.com>:
>> 
>> hi,
>> 
>> look at your logs:
>> 
>> (197) eap_peap: <<< recv TLS 1.3  [length 0062]
>>     ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
>> 
>> (197) eap_peap: >>> send TLS 1.0 Alert [length 0002], fatal protocol_version
>> 
>> 
>> now look at your config
>> 
>> 
>>               tls_min_version = "1.0"
>>               tls_max_version = "1.2"
>>              ^^^^^^^^^^^^^^^^^^
>> 
>> 
>> is that the hint you needed?
>> 
>> alan
>> -
>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> 
> --
> Freundliche Grüße
> Christoph Litauer
> _________________________________________
> Uni Koblenz, Rechenzentrum, Raum A 022
> Postfach 201602, 56016 Koblenz
> Fon: +49 261 287-1311, Fax: -100 1311
> 
> 
> 
> 
> 
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


-- 
Freundliche Grüße
Christoph Litauer
_________________________________________
Uni Koblenz, Rechenzentrum, Raum A 022    
Postfach 201602, 56016 Koblenz     
Fon: +49 261 287-1311, Fax: -100 1311