plugins
plugins copied to clipboard
os-freeradius: EAP max TLS version increase
Important notices Before you add a new report, we ask you kindly to acknowledge the following:
- [X] I have read the contributing guide lines at https://github.com/opnsense/plugins/blob/master/CONTRIBUTING.md
- [X] I have searched the existing issues, open and closed, and I'm convinced that mine is new.
- [X] When the request is meant for an existing plugin, I've added its name to the title.
Describe the solution you'd like
Currently the TLS version is hardcoded to a maximum of 1.2 via the entry tls_max_version = "1.2" in the config file /usr/local/etc/raddb/mods-enabled/eap generated by /usr/local/opnsense/service/templates/OPNsense/Freeradius/mods-enabled-eap
Since both OpenSSL (since 1.1.1) and FreeRADIUS (since 3.0.26) support TLS 1.3, the maximum version should probably be increased to this version if nothing else speaks against it.
Describe alternatives you've considered None