From: Alan T. DeKok <aland@freeradius.org>
Date: Tue, 26 Sep 2017 21:12:42 +0000 (-0400)
Subject: update docs
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c789c554ee975aa74e6ec1f487a2cec541d7d253;p=thirdparty%2Ffreeradius-server.git

update docs
---

diff --git a/raddb/mods-available/eap b/raddb/mods-available/eap
index fd2e4e076f4..b72d37c21ba 100644
--- a/raddb/mods-available/eap
+++ b/raddb/mods-available/eap
@@ -1027,11 +1027,6 @@ eap {
 	fast {
 		# Point to the common TLS configuration
 		#
-		# cipher_list though must include "ADH" for anonymous provisioning.
-		# This is not as straight forward as appending "ADH" alongside
-		# "DEFAULT" as "DEFAULT" contains "!aNULL" so instead it is
-		# recommended "ALL:!EXPORT:!eNULL:!SSLv2" is used
-		#
 		tls = tls-common
 
 		#
@@ -1042,9 +1037,16 @@ eap {
 		#  specifications mandata a different set of ciphers
 		#  than are used by the other EAP methods.
 		#
+		#  cipher_list though must include "ADH" for anonymous provisioning.
+		#  This is not as straight forward as appending "ADH" alongside
+		#  "DEFAULT" as "DEFAULT" contains "!aNULL" so instead it is
+		#  recommended "ALL:!EXPORT:!eNULL:!SSLv2" is used
+		#
+		#  Note - for OpenSSL 1.1.0 and above you may need
+		#  to add ":@SECLEVEL=0"
+		#
 		cipher_list = "ALL:!EXPORT:!eNULL:!SSLv2"
 
-
 		# PAC lifetime in seconds (default: seven days)
 		#
 		pac_lifetime = 604800