Re: FreeRADIUS 3.2.8 with EAP-FAST: MS-CHAP2-Response is incorrect
Alan DeKok via Freeradius-Users <[email protected]> Thu, 8 Jan 2026 11:19:13 -0500
| Newsgroups | gmane.comp.freeradius.user |
|---|---|
| Message-ID | <[email protected]> |
On Jan 5, 2026, at 6:10 AM, Alan DeKok <[email protected]> wrote: > Hmm... OK. I just tried it, I'm seeing the same thing. I'm not sure what changed. After a quick look, it seems to be an OpenSSL issue. For some reason, the SHA256 code in OpenSSL isn't doing its job. Tracking that down will be more work. You might be able to fix it by updating the cipher_list to include SECLEVEL=1? That might re-enable SHA256. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
signature.asc
(application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEIUl02elqcIsf1zM0v3SJ0h7dTTMFAmlf2QEACgkQv3SJ0h7d TTO0Zg//VDJh/k9UA4K7ezbDfBpeVcTOS5xGpwl1lbY3/WTiymEGmn6bO+RvNogt CApq8lOBIPgjojVVH2I7PeWTC+UENi7CF9xXcR4iaUPia8aFfwce8Axruqps+mCu 3CrAMr+FoaarZNKlhYqOdVNW+jsGokBooTkPcInU3EOvyvsA7NkosK5IKCfOj8KV azXkkFQqvaI4IMVqW47GvrhtrTNblrXwLCPyC6zvTYvVobELvZRWg+Qa7L480MXO YUv6nN7HDVT9youNdEYb2hVCJYEGoqNLX9K8AnSPoPmUhYXTmlAc9qOallgF98xD I0EGrnYrKktKjeSKUudiWkGSyjMQFDlVypBaqEWGTl47C+F9GtyvJWm3NkQ6jfPx 1ZEoAT7J5eGE39B6wsgFk/wiZmlUF0ZDG5JstYTZ9KIg2mdY71LBOMTRF5pOWl7q gxx2KJguVfJynC8wXCn1AA1pWALESXce5xIgsCT/rrR2zZU57n7oJYhVa7Fl4v6t i1I2L1m1RoRapFwA3D43AfxASLFFSfUZ7dbgRNWso+qoScg+iLVomPyQMnP0sdct zc2sPZRhgAjhHRImtXEM8bq7lj8dRya2u1wvzXsBMX8JanVCpM+WJYg7m0Zf2RbP K6C1thBTDPjfxbAyzse8TMSKTFLU4en/deFv63vN6EYUu1OE2n8= =D7Hu -----END PGP SIGNATURE-----