Make DH parameters optional

djjudas21 / puppet-freeradius

Puppet module to install and configure FreeRADIUS

Apache License 2.0

8 stars 48 forks source link

Make DH parameters optional #180

Open thtomate opened 1 year ago

thtomate commented 1 year ago

They are not needed anymore and it even gives a warning if you have them.

nward commented 1 year ago

Hi @thtomate can you give some more information about this?

Which parameters should be changed to be optional? Puppet or freeradius configuration?
What is the warning message that is given?
Is this a freeradius change and freeradius warning, or, something in puppet?

thtomate commented 1 year ago

The freeradius parameter dh_file in eap module config.

Warning on freeradius start-up:

Wed Apr 12 20:40:04 2023 : Warning: tls: Setting DH parameters from /etc/freeradius/certs/dh - this is no longer necessary.
Wed Apr 12 20:40:04 2023 : Warning: tls: You should comment out the 'dh_file' configuration item.

nward commented 1 year ago

I understand the issue now @thtomate - let's resolve this as part of #184