>I think Adam's guide is a bit unclear about OpenSSL requirements. An
> openssl from the 0.9.7 series (currently in beta) or the development
> series is needed for the EAP/TLS support in freeradius. As far as I know
> the same openssl version can be used for the rest of your system too
> (including freeradius). Note that we haven't verified this, there are some
> API changes between 0.9.6 and 0.9.7 that could possibly be an issue but
> IMHO they are unlikely to be a problem for freeradius.
Ok at risk of sounding dense here, I should be able to keep my install of
openssl0.9.6g installed normally, install openssl0.9.7-beta in
/usr/local/openssl, and configure freeradius by
1) ./configure --with-raddb=/etc (for my config)
2) editing ./src/modules/rlm_eap/types/rlm_eap_tls/Makefile to include path
to openssl0.9.7-beta libs and includes (as in Adam's HOWTO)
3) make
4) make install
It seems I must be missing something in my configuration of the build as I
am dumping on the make at the rlm_eap segment of build.
For Reference, my edited rlm_eap_tls makefile looks like this
# Generated automatically from Makefile.in by configure.
TARGET = rlm_eap_tls
SRCS = rlm_eap_tls.c eap_tls.c cb.c tls.c mppe_keys.c
RLM_CFLAGS = $(INCLTDL) -I../.. -I/usr/local/openssl/include
HEADERS = eap_tls.h
RLM_INSTALL =
RLM-LDFLAGS += -L/usr/local/openssl/lib
RLM_LIBS += -lcrypto -lssl
$(STATIC_OBJS): $(HEADERS)
$(DYNAMIC_OBJS): $(HEADERS)
RLM_DIR=../../
include ${RLM_DIR}../rules.mak
Raymond McKay
IT Manager / Network Administrator
Funnybone Interactive
Vivendi Universal Games
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
