FreeRADIUS 3.2.8 with EAP-FAST: MS-CHAP2-Response is incorrect

[Alan DeKok]

On Jan 5, 2026, at 6:10 AM, Alan DeKok <alan.dekok at inkbridge.io> wrote:
>  Hmm... OK.  I just tried it, I'm seeing the same thing.  I'm not sure what changed.

  After a quick look, it seems to be an OpenSSL issue.

  For some reason, the SHA256 code in OpenSSL isn't doing its job.  Tracking that down will be more work.

  You might be able to fix it by updating the cipher_list to include SECLEVEL=1?  That might re-enable SHA256.

  Alan DeKok.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: Message signed with OpenPGP
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20260108/1df6fcdd/attachment.sig>