[RADIATOR] Apple iOS 9 and OS X El Capitan

[Howard, Christopher]

Right now, just Apple.  If I take TLSv1 out of the EAPTLS_Protocols line
and watch logs, every attempt results in an "access reject" except for a
small handful of Apple devices.

-Christopher




On 7/31/15, 10:31 AM, "Heikki Vatiainen" <hvn at open.com.au> wrote:

>On 07/31/2015 05:04 PM, Howard, Christopher wrote:
>
>> We're running CentOS 6 here and fixed the TLSv1.2 issue with these new
>> OSes.  You're correct that using yum to install Net::SSLeay will result
>>in
>> not being able to use newer versions of TLS.
>
>Thanks for confirming this.
>
>> However, I've always used the CPAN shell to build and install perl
>> modules.  Doing this works perfectly fine and it's almost as easy as
>>using
>> yum.  We're running Net::SSLeay v1.70 here without any problems on
>>CentOS
>> 6.
>
>Thanks for the confirmation. I have also often used modules this way.
>For some organisations this can be problematic because of local
>policies, etc., so that's why we'd like to see that Radiator works with
>the system supplied modules too.
>
>Are the clients Apple clients or are you seeing Android or Windows
>clients using TLS 1.2 too?
>
>Thanks,
>Heikki
>
>-- 
>Heikki Vatiainen <hvn at open.com.au>
>
>Radiator: the most portable, flexible and configurable RADIUS server
>anywhere. SQL, proxy, DBM, files, LDAP, NIS+, password, NT, Emerald,
>Platypus, Freeside, TACACS+, PAM, external, Active Directory, EAP, TLS,
>TTLS, PEAP, TNC, WiMAX, RSA, Vasco, Yubikey, MOTP, HOTP, TOTP,
>DIAMETER etc. Full source on Unix, Windows, MacOSX, Solaris, VMS,
>NetWare etc.
>_______________________________________________
>radiator mailing list
>radiator at open.com.au
>http://www.open.com.au/mailman/listinfo/radiator