EAP TTLS woes

[Alan DeKok]

On Sep 28, 2021, at 7:37 AM, Adrian Smith via Freeradius-Users <freeradius-users at lists.freeradius.org> wrote:
> We are struggling a little bit:
> 
> build/objs/src/main/tls.o: In function `set_ecdh_curve':
> /freeradius-server/src/main/tls.c:3446: undefined reference to `SSL_CTX_set1_curves_list'
> /freeradius-server/src/main/tls.c:3453: undefined reference to `SSL_CTX_set_ecdh_auto'
> /freeradius-server/src/main/tls.c:3461: undefined reference to `SSL_CTX_set_ecdh_auto'
> collect2: ld returned 1 exit status
> make: *** [build/bin/radeapclient] Error 1
> 
> 
> This looks like new code in .22 onwards?

  Yes.

> [root at fad446045112 /]# openssl version
> OpenSSL 1.0.1e-fips 11 Feb 2013

  The above code is protected by a "ifdef" which checks for OpenSSL 1.0.2.  So it looks like you have two versions of OpenSSL installed, which is not recommended.

  But for your purposes, just delete the code, or ifdef it out.  Or, install a more recent version of OpenSSL.

  For v4, we're limiting OpenSSL to 1.1.0 or later.  Because everything else is very very old.

  Alan DeKok.