Bug 58373 - EAP cipher_list configurable
Summary: EAP cipher_list configurable
Status: CLOSED FIXED
Alias: None
Product: UCS
Classification: Unclassified
Component: Radius
Version: UCS 5.0
Hardware: Other Linux
: P5 normal
Target Milestone: UCS 5.2-3-errata
Assignee: Jan Meier
QA Contact: Dirk Wiesenthal
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2025-06-04 15:36 CEST by Fabian Schneider
Modified: 2025-11-27 13:19 CET (History)
3 users (show)

See Also:
What kind of report is it?: Feature Request
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?: Yes
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number: 2025060221000186
Bug group (optional):
Customer ID: 20677
Max CVSS v3 score:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Fabian Schneider univentionstaff 2025-06-04 15:36:10 CEST 
currently it's not possible to configure e.g. cipher_list using UCR variables in /etc/univention/templates/files/etc/freeradius/3.0/mods-available/eap. It might make sense migrating common settings to ucr, so clients do not need to change templates
Comment 2 Dirk Wiesenthal univentionstaff 2025-11-26 09:29:17 CET 
univention-radius.yaml
839acced702e | chore(radius): Advisory

univention-radius (9.3.1)
4f891a9d8f06 | chore(radius): bump changelog

univention-radius (9.3.0)
5ac34bbf4b54 | feat(radius): add new template tls_min_version and cipher_list
Comment 3 Andreas Peichert univentionstaff 2025-11-26 14:14:29 CET 
Discussed with Dirk: automated tests looks good
Comment 4 Dirk Wiesenthal univentionstaff 2025-11-27 13:19:30 CET 
<https://errata.software-univention.de/#/?erratum=5.2x292>