How to check values of TLS-Client-Cert-X509v3-Extended-Key-Usage-OID attribute ?

[Arnaud LAURIOU]

Hi,

I would like to check the values of the 
TLS-Client-Cert-X509v3-Extended-Key-Usage-OID
attribute contained in a client's certificate when establishing an 
incoming RadSec
connection on a proxy server.

If those values match known strings then process the request else close 
the RadSec
connection.

How can I do that with FR 3.0.21 ?

Regards,

Arnaud Lauriou