Re: Upgrading to 3.2.10 Breaks EAP-TLS

--===============2560181777011448478==
Content-Type: multipart/signed;
	boundary="Apple-Mail=_B53F78B1-C212-42D9-A2AB-C67442A4BD15";
	protocol="application/pgp-signature";
	micalg=pgp-sha256


--Apple-Mail=_B53F78B1-C212-42D9-A2AB-C67442A4BD15
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
	charset=utf-8

On Jun 12, 2026, at 1:36=E2=80=AFPM, Hector Rodriguez via =
Freeradius-Users <[email protected]> wrote:
>  It seems that I fixed my issue with EAP-TLS after the new update. In =
the code below you will see : "configurable_client_cert =3D yes" and =
"EAP-TLS-Require-Client-Cert =3D yes" . If both are enabled and set to =
yes, it would cause conflict. It seems that I had to comment out =
"configurable_client_cert =3D yes"  in order for EAP-TLS to work =
correctly. Based on the comment, it seems that both =
"configurable_client_cert =3D yes" and "EAP-TLS-Require-Client-Cert =3D =
yes" should work together, but it does not. I hope that the change I =
made is the correct one, which makes the server require a client cert.

  It should be fine.  This change is odd, tho.  We had checked it, and =
didn't see any issues.=20

  The main problem is that the OpenSSL APIs are not at all clear.  This =
makes it difficult to add or change anything without those updates =
having a side effect.

  Alan DeKok.


--Apple-Mail=_B53F78B1-C212-42D9-A2AB-C67442A4BD15
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
	filename=signature.asc
Content-Type: application/pgp-signature;
	name=signature.asc
Content-Description: Message signed with OpenPGP

-----BEGIN PGP SIGNATURE-----
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=70JS
-----END PGP SIGNATURE-----

--Apple-Mail=_B53F78B1-C212-42D9-A2AB-C67442A4BD15--

--===============2560181777011448478==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

--===============2560181777011448478==--