On 09/03/23 11:09 AM, Daniel Baumann wrote: Hi Daniel,
> the latest upstream release (3.2.2) fixes some important bugs for us, > e.g. the fact that using an intermediate CA for which EAP-TLS, upstream > writes: > > "It's also worth mentioning that FreeRADIUS 3.2.1 has an issue with > partial chains. E.g. if you have > > Root CA -> Intermediate CA -> Client Cert > > and you want to put just Intermediate CA in the ca_file as that is > what you want to trust rather than the root CA, then that does not > work correctly on 3.2.1." > > Given the freeze, it would be very helpful if you could upload 3.2.2 to > experimental, this would ease the local backporting on our end > tremendously since we need 3.2.2 I can do so later, but I would prefer to fix these bugs in bookworm, where uploading a whole new upstream version is not accepted at this point in the release preparation (https://release.debian.org/testing/freeze_policy.html). Interestingly someone else has reported the partial CA problem a few hours after your report, and provided a link to the issue/commit fixing this. See Bug#1032590 I have just uploaded 3.2.1-3 to the archive, it should be built in the next hours. Could you test the resulting package and report back? Bernhard
signature.asc
Description: PGP signature
