From hvn at open.com.au  Fri Aug 29 08:56:54 2025
From: hvn at open.com.au (Heikki Vatiainen)
Date: Fri, 29 Aug 2025 11:56:54 +0300
Subject: [RADIATOR] Using SNI with AuthRADSEC
In-Reply-To: <ExE1jDBDggXHyWC7RiJmPO56lUIF9XzzSStn_q9JUaQN33lSHyouYwaXHM6pNr-3pr4smnaiVPNTBMxSRPeGFIeFFwXrh5kyiOPtNrHMvt4=@eons.net>
References: <ExE1jDBDggXHyWC7RiJmPO56lUIF9XzzSStn_q9JUaQN33lSHyouYwaXHM6pNr-3pr4smnaiVPNTBMxSRPeGFIeFFwXrh5kyiOPtNrHMvt4=@eons.net>
Message-ID: <10ccffd2-128c-497b-a5b1-03cc46874d73@open.com.au>


On 25.7.2025 13.40, Stefan Paetow (OpenSource) via radiator wrote:

> So we've had a request that is a little bit more out of left field... 
> We've been asked to check if it's possible to use SNI (Server Name 
> Indication) with Radsec through Radiator. I've looked in the docs and I 
> can't see anything in particular for AuthRADSEC to set SNI.

It's not in there yet. It seems adding it to outgoing RadSec connections 
in AuthBy RADSEC is straight forward.

Adding it to the incoming RadSec for Server RADSEC would require a bit 
more, but if outgoing is needed now, then it can certainly can go in first.

> Does that exist? If not, can that be added?

It can be added. I was away for summer vacation and then looked into 
more about the incoming server side too. Please excuse me for taking a 
time to reply.

I'll add the outgoint SNI support first and send a note to this list 
when done.


Thanks,
Heikki

-- 
Heikki Vatiainen
Radiator Software, makers of Radiator
Visit radiatorsoftware.com for Radiator AAA server software


From oss at eons.net  Fri Aug 29 09:26:16 2025
From: oss at eons.net (Stefan Paetow (OpenSource))
Date: Fri, 29 Aug 2025 09:26:16 +0000
Subject: [RADIATOR] Using SNI with AuthRADSEC
In-Reply-To: <10ccffd2-128c-497b-a5b1-03cc46874d73@open.com.au>
References: <ExE1jDBDggXHyWC7RiJmPO56lUIF9XzzSStn_q9JUaQN33lSHyouYwaXHM6pNr-3pr4smnaiVPNTBMxSRPeGFIeFFwXrh5kyiOPtNrHMvt4=@eons.net>
 <10ccffd2-128c-497b-a5b1-03cc46874d73@open.com.au>
Message-ID: <kih_a1UkTTFWwwjba6hSvqu8hdrWpxOgWlJ0iAnirIRXhQDTts-KBQbEAC3dkt-loHY8pFeO4D06UyAka6JeyrNUa_Cw87QuJqWI_IKzDaA=@eons.net>

Hi Heikki, 

No need to apologise :-)

And yes, it's the outgoing SNI that is more important at this stage, so I'd be grateful if that was added first :-)

And as always, I appreciate the work you folks do to make Radiator better :-)

With kind regards

Stefan



On Friday, 29 August 2025 at 9:57 AM, Heikki Vatiainen via radiator <radiator at lists.open.com.au> wrote:

> 
> 
> 
> On 25.7.2025 13.40, Stefan Paetow (OpenSource) via radiator wrote:
> 
> > So we've had a request that is a little bit more out of left field...
> > We've been asked to check if it's possible to use SNI (Server Name
> > Indication) with Radsec through Radiator. I've looked in the docs and I
> > can't see anything in particular for AuthRADSEC to set SNI.
> 
> 
> It's not in there yet. It seems adding it to outgoing RadSec connections
> in AuthBy RADSEC is straight forward.
> 
> Adding it to the incoming RadSec for Server RADSEC would require a bit
> more, but if outgoing is needed now, then it can certainly can go in first.
> 
> > Does that exist? If not, can that be added?
> 
> 
> It can be added. I was away for summer vacation and then looked into
> more about the incoming server side too. Please excuse me for taking a
> time to reply.
> 
> I'll add the outgoint SNI support first and send a note to this list
> when done.
> 
> 
> Thanks,
> Heikki
> 
> --
> Heikki Vatiainen
> Radiator Software, makers of Radiator
> Visit radiatorsoftware.com for Radiator AAA server software
> 
> _______________________________________________
> radiator mailing list
> radiator at lists.open.com.au
> https://lists.open.com.au/mailman/listinfo/radiator