Tygozwolle
1054dfb61a
Build and Push Docker Image to Gitea Container Registry / build-and-push (push) Successful in 3m17s
43 lines
953 B
Plaintext
43 lines
953 B
Plaintext
eap {
|
|
default_eap_type = peap
|
|
timer_expire = 60
|
|
ignore_unknown_eap_types = no
|
|
cisco_accounting_username_bug = no
|
|
max_sessions = ${max_requests}
|
|
|
|
# TLS configuration section named "certs"
|
|
tls-config certs {
|
|
private_key_password = whatever
|
|
private_key_file = ${certdir}/server.pem
|
|
certificate_file = ${certdir}/server.pem
|
|
ca_file = ${cadir}/ca.pem
|
|
dh_file = ${certdir}/dh
|
|
cipher_list = "DEFAULT@SECLEVEL=1"
|
|
cipher_server_preference = no
|
|
tls_min_version = "1.0"
|
|
tls_max_version = "1.2"
|
|
}
|
|
|
|
# PEAP configuration referencing tls-config certs
|
|
peap {
|
|
tls = certs
|
|
default_eap_type = mschapv2
|
|
copy_request_to_tunnel = yes
|
|
use_tunneled_reply = yes
|
|
virtual_server = "inner-tunnel"
|
|
}
|
|
|
|
# TTLS configuration referencing tls-config certs
|
|
ttls {
|
|
tls = certs
|
|
default_eap_type = mschapv2
|
|
copy_request_to_tunnel = yes
|
|
use_tunneled_reply = yes
|
|
virtual_server = "inner-tunnel"
|
|
}
|
|
|
|
# MSCHAPv2 configuration
|
|
mschapv2 {
|
|
}
|
|
}
|