TLS handshake error

[Mark Dayton]

This is the full log

bash-5.1# tail opt/var/log/radius/radius.log
Thu Jun 20 08:16:12 2024 : Info: Debugger not attached
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server <default>
Thu Jun 20 08:16:12 2024 : Warning: Ignoring "sql" (see
raddb/mods-available/README.rst)
Thu Jun 20 08:16:12 2024 : Warning: Ignoring "ldap" (see
raddb/mods-available/README.rst)
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server default
Thu Jun 20 08:16:12 2024 : Info:  # Skipping contents of 'if' as it is
always 'false' -- /opt/etc/raddb/sites-enabled/inner-tunnel:366
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server inner-tunnel
Thu Jun 20 08:16:12 2024 : Info: Ready to process requests
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1# tail opt/var/log/radius/radius.log
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server <default>
Thu Jun 20 08:16:12 2024 : Warning: Ignoring "sql" (see
raddb/mods-available/README.rst)
Thu Jun 20 08:16:12 2024 : Warning: Ignoring "ldap" (see
raddb/mods-available/README.rst)
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server default
Thu Jun 20 08:16:12 2024 : Info:  # Skipping contents of 'if' as it is
always 'false' -- /opt/etc/raddb/sites-enabled/inner-tunnel:366
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server inner-tunnel
Thu Jun 20 08:16:12 2024 : Info: Ready to process requests
Thu Jun 20 08:17:37 2024 : Warning: EAP packets for one session are
arriving from two different upstreamservers (10.92.0.6/32 and 10.92.0.5/32).
Has there been a proxy fail-over?
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Alert
write:fatal:handshake failure
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Server :
Error in error
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1# tail opt/var/log/radius/radius.log
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server default
Thu Jun 20 08:16:12 2024 : Info:  # Skipping contents of 'if' as it is
always 'false' -- /opt/etc/raddb/sites-enabled/inner-tunnel:366
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server inner-tunnel
Thu Jun 20 08:16:12 2024 : Info: Ready to process requests
Thu Jun 20 08:17:37 2024 : Warning: EAP packets for one session are
arriving from two different upstreamservers (10.92.0.6/32 and 10.92.0.5/32).
Has there been a proxy fail-over?
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Alert
write:fatal:handshake failure
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Server :
Error in error
Thu Jun 20 08:19:52 2024 : Warning: EAP packets for one session are
arriving from two different upstreamservers (10.92.0.5/32 and 10.92.0.6/32).
Has there been a proxy fail-over?
Thu Jun 20 08:19:52 2024 : ERROR: (5) eap_tls: ERROR: (TLS) TLS - Alert
write:fatal:handshake failure
Thu Jun 20 08:19:52 2024 : ERROR: (5) eap_tls: ERROR: (TLS) TLS - Server :
Error in error
bash-5.1#
bash-5.1#
bash-5.1#
bash-5.1# tail opt/var/log/radius/radius.log
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server default
Thu Jun 20 08:16:12 2024 : Info:  # Skipping contents of 'if' as it is
always 'false' -- /opt/etc/raddb/sites-enabled/inner-tunnel:366
Thu Jun 20 08:16:12 2024 : Info: Loaded virtual server inner-tunnel
Thu Jun 20 08:16:12 2024 : Info: Ready to process requests
Thu Jun 20 08:17:37 2024 : Warning: EAP packets for one session are
arriving from two different upstreamservers (10.92.0.6/32 and 10.92.0.5/32).
Has there been a proxy fail-over?
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Alert
write:fatal:handshake failure
Thu Jun 20 08:17:37 2024 : ERROR: (1) eap_tls: ERROR: (TLS) TLS - Server :
Error in error
Thu Jun 20 08:19:52 2024 : Warning: EAP packets for one session are
arriving from two different upstreamservers (10.92.0.5/32 and 10.92.0.6/32).
Has there been a proxy fail-over?
Thu Jun 20 08:19:52 2024 : ERROR: (5) eap_tls: ERROR: (TLS) TLS - Alert
write:fatal:handshake failure
Thu Jun 20 08:19:52 2024 : ERROR: (5) eap_tls: ERROR: (TLS) TLS - Server :
Error in error

On Wed, 19 Jun 2024 at 21:03, Alan DeKok <aland at deployingradius.com> wrote:

> On Jun 19, 2024, at 4:00 PM, Mark Dayton <m4rk.dayton at gmail.com> wrote:
> >
> > Hi Alan, thanks for the email. Radiusd -x isn't working on this version
> of
> > Alpine Linux
>
>   There's no way that happens.  You can stop the server, and run it in the
> foreground.  There's nothing magic about it.
>
>   If it's "impossible" in your OS, then throw your OS in the garbage, and
> run an OS which works.
>
> > so all I have is the tail log.
> >
> > Below is what it reports when a connection attempt is made.
>
>   That text is from the debug log.  So... post the FULL log.  Not the last
> two lines.
>
>   Alan DeKok.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>