EAP TLS 1.3 Handshake Extensions

[Alan DeKok]

On Sep 9, 2024, at 10:46 AM, Dincer Beken <dbeken at blackned.de> wrote:
> I am using EAP-TLS 1.3 and wan't to add an TLS Extension (not an X509 extension), to the handshake message (Certificate Request), in order to add the OID-Filters defined in TLS 1.3.
> 
> Is this a configuration or a source code extension I need to do in Freeradius? Or is it purely in OpenSSL?

  You would have to add it via OpenSSL API calls, and then expose the functionality in the FreeRADIUS configuration.

  Alan DeKok.