<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div class="">Hi,</div>
<div class=""><br class="">
</div>
<div class="">I’ve been trying to enable a RADSEC connection between two Radiator servers (one running on linux, the other on Windows Server 2019 Datacenter), and I’m running into an issue while doing so on the windows end. I’m using the new msi installer for
version 4.23.3.</div>
<div class="">After adding the very simple barebones ServerRADSEC clause shown below to my configuration: </div>
<div class=""><br class="">
</div>
<div class=""><ServerRADSEC></div>
<div class=""> Identifier UT-Backend-RADSEC</div>
<div class=""> Port 2083</div>
<div class=""> Protocol tcp</div>
<div class=""> Secret SomethingVerySecret</div>
<div class=""><br class="">
</div>
<div class=""> UseTLS</div>
<div class=""><br class="">
</div>
<div class=""> TLS_Protocols TLSv1.1,TLSv1.2</div>
<div class=""> TLS_CertificateType PEM</div>
<div class=""> TLS_CertificateFile %D/certs/cert.pem</div>
<div class=""> TLS_PrivateKeyFile %D/certs/key.pem</div>
<div class=""><br class="">
</div>
<div class=""> TLS_Ciphers DEFAULT</div>
<div class=""></ServerRADSEC></div>
<div class=""><br class="">
</div>
<div class="">Radiator logs the following errors on startup:</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space: pre;"></span>DEBUG: Initialised SSL library: Net::SSLeay 1.85, OpenSSL 1.1.0i 14 Aug 2018</div>
<div class="">
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>INFO: Using Net::SSLeay 1.85 with SSL/TLS library version 0x1010009f (OpenSSL 1.1.0i 14 Aug 2018)</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>DEBUG: SSL/TLS library and Net::SSLeay support set_default_passwd_cb and related functions</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>DEBUG: Radius::ServerRADSEC UT-Backend-RADSEC setting TLS protocols to: TLSv1.1 TLSv1.2</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>DEBUG: Radius::ServerRADSEC UT-Backend-RADSEC setting TLS_Ciphers to: DEFAULT</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>ERR: StreamTLS could not load_verify_locations , : 4100: 1 - error:25078067:DSO support routines:win32_load:could not load the shared library</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>00000000 4100: 2 - error:25070067:DSO support routines:DSO_load:could not load the shared library</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>00000000 4100: 3 - error:260B6084:engine routines:dynamic_load:dso not found</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>00000000 4100: 4 - error:2606A074:engine routines:ENGINE_by_id:no such engine</div>
<div class=""><br class="">
</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span>ERR: Failed to initialise TLS, will not create StreamServer listen socket</div>
</div>
<div class=""><br class="">
</div>
<div class="">
<div class="">The certificate files used definitely do exist in the location specified.</div>
</div>
<div class=""><br class="">
</div>
<div class="">Has anyone ran into this problem before? Is there an additional step required after installation regarding SSL libraries or settings?</div>
<div class=""><br class="">
</div>
<div class="">Kind regards,</div>
<div class=""><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;"><br class="">
</span></b></div>
<div class=""><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">Leon Haverkotte</span><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">Network
engineer</span><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">University
of Twente</span><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif; color: gray;"><b class="" style="color: rgb(0, 0, 0); font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">Library,
ICT Services & Archive (LISA) / ITO</span></b> | </span></b><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">Campus building Spiegel, room 226</span><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><span class="" style="color: gray; font-size: 7pt; font-family: Verdana, sans-serif;">T:
+31 (0)53 - 489 3016</span><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><span style="color: rgb(128, 128, 128); font-family: Verdana, sans-serif; font-size: 9px;" class=""><a href="mailto:l.m.c.haverkotte@utwente.nl" class="">l.m.c.haverkotte@utwente.nl</a></span><b class="" style="font-family: "Times New Roman", serif; font-size: 12pt;"><span class="" style="font-size: 7pt; font-family: Verdana, sans-serif;"><font color="#999999" class=""> | </font></span></b><span style="color: rgb(128, 128, 128); font-family: Verdana, sans-serif; font-size: 9px;" class=""><a href="http://www.utwente.nl/lisa" class="">www.utwente.nl/lisa</a></span></div>
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div class=""><br class="">
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<br class="Apple-interchange-newline">
<br class="Apple-interchange-newline">
</div>
<br class="">
</body>
</html>