On Thu, Aug 28, 2003 at 01:16:18AM +1000, Paul Hampson wrote: > Was this because you linked against one, but tried to run against > the other, or is there a problem between OpenSSL 0.9.6 and FreeRADIUS's > EAP-TLS?
This wouldn't be a Redhat machine would it? For better or worse, Redhat still insists on pushing out patched openssl-0.96 stuff instead of the current 0.97 tree - which FreeRADIUS docs as being a REQUIREMENT to get it working. As just about every third app these days is linked against OpenSSL, it's basically impossible to replace the RH OpenSSL install with 0.97 - leaving FreeRADIUS in a hard place. The only way I've found to get it to work is to manually compile and install 0.97 under (say) /usr/local/ssl-0.97b, then move all the /usr/lib 0.96 libraries aside, rename /usr/include/openssl to something else, and put symlinks in to the 0.97 stuff. Then compile FreeRADIUS, but run it under LD_LIBRARY_PATH=/usr/local/ssl-0.97b/lib. Oh yeah, and don't forget to reverse out all those renames afterwards otherwise you'll have one hell of a broken system There must be a cleaner way... Besides moving to another distro ;-) -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +64 3 9635 377 Fax: +64 3 9635 417 PGP Fingerprint: 7A2E 0407 C9A6 CAF6 2B9F 8422 C063 5EBB FE1D 66D1 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
