radius authentication via TCP/TLS

[Alexander Clouter]

On Sat, 4 Jul 2026, at 02:33, Stefan Paetow via Freeradius-Users wrote:
> I would second Alex's suggestion. I use socat in a similar fashion to 
> run a Status-Server check for a series of hosts (given that I cannot 
> proxy a Status-Server check).
>
> It works fine :-)

Another favourite of mine, though it took a while for me to cotton onto the need to escape the ':' as socat's argument parser is interesting:

socat -d TCP-LISTEN:1812,fork EXEC:"openssl s_client -connect 192.0.2.1\:2083 -psk_identity cli -psk ... -noservername -quiet"

Cheers