FreeRadius3 on FreeBSD 10.3

[Olivier]

Hi,

Anybody has succeeded to run FreeRadius3 on FreeBSD 10.3-RELEASE?

It is complaining that the version of OpenSSL contains bug, but OpenSSl
comes with FreeBSD system and i am prety sure I have applied all
security patches (last patch regarding OpenSSL is p17, SA published in
february this year).

FreeBSD ldap.cs.ait.ac.th 10.3-RELEASE-p17 FreeBSD 10.3-RELEASE-p17 #5 r314483: Thu Mar  2 13:04:10 ICT 2017     root at ldap.cs.ait.ac.th:/usr/obj/usr/src/sys/GENERIC  i386

freeradius3-3.0.14 compiled from the ports

The error message is:

Error: Refusing to start with libssl version OpenSSL 1.0.1s-freebsd  1 Mar 2016 0x1000113f (1.0.1s release) (in range 1.0.1 release - 1.0.1t rele)
Error: Security advisory CVE-2016-6304 (OCSP status request extension)

This error was corrected in FreeBSD-SA-16:26.openssl

Obviously FreeRadius is only comparing the version number of OpenSSL and
does not do a good job at checking the fact that the error has been
corrected or not.

So how do you run FreeRadius3 on FreeBSD 10.3-RELEASE?

Thanks in advance.

Olivier


--