compilation problem deprecated: Since OpenSSL 3.0

[Joost Ringoot]

Thanks for the suggestion.


Meanwhile I found the eapoltest is available in debian as separate package, and it appears to function 


https://packages.debian.org/bookworm/eapoltest

I have other questions however:
Is there  an upgrade or current documentation that handles EAP-TTLS?

Can you provide a link? because this is all I can find on your site about it, all the searches and throughclicking seem to lead to this same PDF from 2014


(Following "THE FREERADIUS IMPLEMENTATION GUIDE" (2014 network radius sarl)
>> chapter 6 -EAP authentication, Pg 46,47)

Further I read everywhere on internet that mschap and also mschapv2 is flawed

microsoft advises not to use it
https://learn.microsoft.com/en-us/windows/security/identity-protection/credential-guard/credential-guard-considerations#wi-fi-and-vpn-considerations
some security sites show how to walk trough it's defense.
https://www.kitploit.com/2021/09/assless-chaps-crack-mschapv2.html
https://securityonline.info/assless-chaps-crack-mschapv2-challenge-responses-quickly/

Thanks,

Joost


----- Original Message -----
> From: "Alan DeKok" <aland at deployingradius.com>
> To: "Joost Ringoot" <joost.ringoot at meteo.be>, "hostap" <hostap at lists.infradead.org>
> Sent: Thursday, 15 June, 2023 14:31:19
> Subject: Re: compilation problem  deprecated: Since OpenSSL 3.0

> On Jun 15, 2023, at 6:30 AM, Joost Ringoot <joost.ringoot at meteo.be> wrote:
>> I am trying to compile eampol_test
>> 
>> "make eapol_test"
>> 
>> (Following "THE FREERADIUS IMPLEMENTATION GUIDE" (2014 network radius sarl)
>> chapter 6 -EAP authentication, Pg 46,47)
> 
>  That guide was written long before OpenSSL3 came out.  It is very likely that's
>  it's not relevant here.
> 
>  I suggest looking at the hostap source.
> 
> $ git grep -i openssl3
> 
>  That may be instructive.
> 
>   Alan DeKok.