EAPTLS_SecurityLevel
is an integer
parameter that sets the SSL library security level for the enclosing
clause. Security levels were added in OpenSSL 1.1.0 and are detailed in
OpenSSL manual page SSL_CTX_set_security_level
. There
is no default and the system default is used. This parameter may be needed
if you see unexpected TLS errors with older clients.
Security level
can also set together with ciphers in which case
EAPTLS_SecurityLevel
is not needed. For more
information, see
Section 3.10.12. EAPTLS_Ciphers
# The default on this system, 2, is too strict for our clients,
# lower it for this Radiator module
EAPTLS_SecurityLevel 1