3.10.13. EAPTLS_SecurityLevel Previous topic Parent topic Child topic Next topic

EAPTLS_SecurityLevel is an integer parameter that sets the SSL library security level for the enclosing clause. Security levels were added in OpenSSL 1.1.0 and are detailed in OpenSSL manual page SSL_CTX_set_security_level. There is no default and the system default is used. This parameter may be needed if you see unexpected TLS errors with older clients.
Security level can also set together with ciphers in which case EAPTLS_SecurityLevel is not needed. For more information, see Section 3.10.12. EAPTLS_Ciphers
# The default on this system, 2, is too strict for our clients,
# lower it for this Radiator module
EAPTLS_SecurityLevel 1