Re: radius authentication via TCP/TLS

Alexander Clouter via Freeradius-Users <[email protected]> Sat, 04 Jul 2026 09:38:55 +0100
Newsgroups gmane.comp.freeradius.user
Message-ID <[email protected]>
On Sat, 4 Jul 2026, at 02:33, Stefan Paetow via Freeradius-Users wrote:
> I would second Alex's suggestion. I use socat in a similar fashion to 
> run a Status-Server check for a series of hosts (given that I cannot 
> proxy a Status-Server check).
>
> It works fine :-)

Another favourite of mine, though it took a while for me to cotton onto the need to escape the ':' as socat's argument parser is interesting:

socat -d TCP-LISTEN:1812,fork EXEC:"openssl s_client -connect 192.0.2.1\:2083 -psk_identity cli -psk ... -noservername -quiet"

Cheers
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html