Document disable tls 1.2 because of OpenSSL breakage

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index ed742852cc65e00b112e41faf48d92355cd9d2d2..1b69550d28293a76de7c6aa7389ad318696b8509 100644 (file)
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -322,6 +322,12 @@ eap {
                # in "man 1 ciphers".
                cipher_list = "DEFAULT"
 
+               # Work-arounds for OpenSSL nonsense
+               # OpenSSL 1.0.1f and 1.0.1g do not calculate
+               # the EAP keys correctly.  The fix is to upgrade
+               # OpenSSL, or disable TLS 1.2 here. 
+#              disable_tlsv1_2 = no
+
                #
 
                #