Hello everyone !
I'm deploying a NAC solution for a customer with PacketFence. I use freeradius (freeradius is automatically installed with PacketFence).
However, I have a problem with FreeRadius. FreeRadius doesn't want to start on my virtual machine. (I use Centos 7).
I have this issue when I want to start radiuds with the radius -X command :
Debugger not attached
Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 0x1000105f (1.0.1e release) (in range 1.0.1 release - 1.0.1t rele)
Security advisory CVE-2016-6304 (OCSP status request extension)
For more information see https://www.openssl.org/news/secadv/20160922.txt
Once you have verified libssl has been correctly patched, set security.allow_vulnerable_openssl = 'CVE-2016-6304'
Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 0x1000105f (1.0.1e release) (in range 1.0.1 dev - 1.0.1f release)
Security advisory CVE-2014-0160 (Heartbleed)
For more information see http://heartbleed.com
When I check the status of radiusd with systemctl status radiusd, I have this result :
Hello everyone ! I'm deploying a NAC solution for a customer with PacketFence. I use freeradius (freeradius is automatically installed with PacketFence). However, I have a problem with FreeRadius. FreeRadius doesn't want to start on my virtual machine. (I use Centos 7). I have this issue when I want to start radiuds with the radius -X command :
Debugger not attached Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 0x1000105f (1.0.1e release) (in range 1.0.1 release - 1.0.1t rele) Security advisory CVE-2016-6304 (OCSP status request extension) For more information see https://www.openssl.org/news/secadv/20160922.txt Once you have verified libssl has been correctly patched, set security.allow_vulnerable_openssl = 'CVE-2016-6304' Refusing to start with libssl version OpenSSL 1.0.1e-fips 11 Feb 2013 0x1000105f (1.0.1e release) (in range 1.0.1 dev - 1.0.1f release) Security advisory CVE-2014-0160 (Heartbleed) For more information see http://heartbleed.com
When I check the status of radiusd with systemctl status radiusd, I have this result :
root@localhost raddb]# systemctl status radiusd ● radiusd.service - FreeRADIUS multi-protocol policy server Loaded: loaded (/usr/lib/systemd/system/radiusd.service; disabled; vendor preset: disabled) Active: inactive (dead) Docs: man:radiusd(8) man:radiusd.conf(5) http://wiki.freeradius.org/ http://networkradius.com/doc/
Can you help me ?
Thank you very much in advance !
Kind regards,
Xavier TAURAN