3.2.0: TLS-* attributes for incoming and outgoing RadSec connections
Alan DeKok
aland at deployingradius.com
Fri Jun 3 13:49:28 UTC 2022
On Jun 3, 2022, at 9:32 AM, Stefan Winter <stefan.winter at restena.lu> wrote:
> Here is the full debug output, from dynamic discover to final response, if that's useful; one can see a bit of confusion... the "server" certificate attribs get populated with a few *issuer* certificate details; and then the "client" certificate ones get the server cert.
OK, so OpenSSL gives us a certificate chain:
incoming
[0] = client cert
[1] = server
[2] = issuer...
outgoing
no client cert, you already have that!
[0] = server
[1] = issuer
I'll poke it and see what I can come up with.
Alan DeKok.
More information about the Freeradius-Users
mailing list