(RADIATOR) Radiator 3.17.1-20070902 broken by Net-SSLeay 1.32?

Mike McCauley mikem at open.com.au
Thu Sep 27 02:27:45 CDT 2007

Hello Robin,

thanks for reporting this.

We have not been able to reproduce any problems with keys and Net-SSLeay 1.32 
on any platform including Solaris.

I suspect that your problem will be due to multiple conflicting versions of 
Net-SSLeay and/or openssl being installed on the compile and/or target hosts.

eg openssl installed in both /usr and /usr/local, and one being used to 
compile Net-SSLeay and the other at run time. Something like that.

Like you I dont see any changes in 1.32 that should be relevant.

If you continue to have a problem after eliminating that, will you please post 
your configuration file and log file at trace level 4 to the list?


On Wednesday 26 September 2007 03:32, Robin Breathe wrote:
> It seems that the latest release of Net-SSLeay, version 1.32, breaks the
> Radiator 3.17.1 (with the patches to 2007/09/02) PEAP/TTLS exchange.
> While authentication is successful and Radiator sends the normal
> Access-Accept, etc., the returned MPPE key appears to be garbled and is
> rejected upstream. I don't see any errors logged running at Trace 4.
> Net-SSLeay-1.30 works without issue. All with perl-5.8.8 running under
> Solaris 10 serving Cisco 1100-series APs.
> Nothing springs out at me from the changelog:
>   http://search.cpan.org/src/FLORA/Net-SSLeay-1.32/Changes
> Ideas?
> Robin

Mike McCauley                               mikem at open.com.au
Open System Consultants Pty. Ltd            Unix, Perl, Motif, C++, WWW
9 Bulbul Place Currumbin Waters QLD 4223 Australia   http://www.open.com.au
Phone +61 7 5598-7474                       Fax   +61 7 5598-7070

Radiator: the most portable, flexible and configurable RADIUS server 
anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald, 
Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS, 
TTLS, PEAP etc on Unix, Windows, MacOS, NetWare etc.

Archive at http://www.open.com.au/archives/radiator/
Announcements on radiator-announce at open.com.au
To unsubscribe, email 'majordomo at open.com.au' with
'unsubscribe radiator' in the body of the message.

More information about the radiator mailing list