Re: FreeRADIUS PostgreSQL sslrootcert only

Nick Porter <[email protected]> Fri, 27 Mar 2026 17:07:22 +0000

Newsgroups	gmane.comp.freeradius.user
Message-ID	<[email protected]>

On 27/03/2026 11:42, Sam Hutchings wrote:
> My query is whether there is a solution to allow FreeRADIUS to ignore
> the sslcert/sslkey being missing from the connection string to enable
> this to function similarly to the above or whether this is a
> limitation of the Azure service that I am using and I should query
> with Microsoft Support.

The "radius_db" string is passed to the PostgreSQL client library 
function PQconnectdb - FreeRADIUS doesn't attempt to interpret it at all.

Looking at the PostgreSQL client library documentation 
https://www.postgresql.org/docs/current/libpq-connect.html#LIBPQ-CONNSTRING 
there is an option sslcertmode which determines the client certificate 
behaviour.

Setting that to "disable" will make the connection without attempting to 
load a client certificate.

Nick

-- 
Nick Porter

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

OpenPGP_signature.asc (application/pgp-signature, 665 B)