3.2.0: TLS-* attributes for incoming and outgoing RadSec connections

Alan DeKok aland at deployingradius.com
Fri Jun 3 13:49:28 UTC 2022


On Jun 3, 2022, at 9:32 AM, Stefan Winter <stefan.winter at restena.lu> wrote:
> Here is the full debug output, from dynamic discover to final response, if that's useful; one can see a bit of confusion... the "server" certificate attribs get populated with a few *issuer* certificate details; and then the "client" certificate ones get the server cert.

  OK, so OpenSSL gives us a certificate chain:

incoming
	[0] = client cert
	[1] = server
	[2] = issuer...

outgoing
	no client cert, you already have that!
	[0] = server
	[1] = issuer

  I'll poke it and see what I can come up with.

  Alan DeKok.



More information about the Freeradius-Users mailing list