Unable to use freeradius 3.0.26 with openssl 3.0

[Alan DeKok]

On Jan 20, 2025, at 12:38 PM, Amit P <amit.subscription at gmail.com> wrote:
> Thanks for your response.
> As per 3.0.26 release notes (
> https://www.freeradius.org/release_notes/?s=3.0.26) OpenSSL3 support is
> available in this version.

  Yes, you don't need to quote that to me.  I already agreed that it supported OpenSSL3.

  Please read the message you're replying to.  I said that you had to build the server using OpenSSL3.  If you're already running a copy with OpenSSL1... then it was built against OpenSSL1, and not OpenSSL3.

  You can't just upgrade the OpenSSL libraries, and expect a pre-built binary of FreeRADIUS to be OK with that.

> I am building Freeradius using below Yocto recipe, so it should pick the
> system's OpenSSL version where it is being compiled.
> https://git.openembedded.org/meta-openembedded/tree/meta-networking/recipes-connectivity/freeradius/freeradius_3.0.26.bb?h=mickledore

  Ask Yocto how their recipes work, and why it's not picking OpenSSL3.  I didn't write those recipes, and I know nothing about them.

  When you build the server from source (not using some broken third-party tools), it will pick OpenSSL3 if OpenSSL3 is installed.

> Are you saying we can't use Freeradius 3.0.26 package with OpenSSL3.0.

  I didn't say that.

  Please read my messages.  They are very clear.  When I say "build FreeRADIUS using OpenSSL3", I don't mean "you can't build FreeRADIUS with OpenSSL3".

  Alan DeKok.