Building Ubuntu FreeRadius 1.1.7 with EAP/TLS/TTLS support

Ubuntu do not have freeradius1 is their repo.It’s annoying considering most of the online guide/config for freeradius TTLS is on freeradius1.Moreover,due to licensing issue,Ubuntu do not support EAP/TLS/TTLS by default.

This is the steps to get a freeradius1 with EAP/TLS/TTLS deb

1. Download from freeradius.org. during time of writing it’s 1.1.7 wget -c ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.7.tar.gz

2. extract it into a directory. tar xvf freeradius-1.1.7.tar.gz

3. change directory cd freeradius-1.1.7

4. check debian/rules nano debian/rules.Ensure this line is uncomment and “buildssl” contain –with-rlm_eap_peap –with-rlm_eap_tls –with-rlm_eap_ttls
modulepackages = krb5 ldap mysql iodbc postgresql
buildssl = --with-rlm_eap_peap --with-rlm_eap_tls --with-rlm_eap_ttls --with-rlm_sql_postgresql_lib_dir=`pg_config --libdir` --with-rlm_sql_postgresql_include_dir=`pg_config --includedir`

5. check debian/control nano debian/control and ensure libssl-dev is in the build depends Build-Depends: debhelper (>= 4.2.32), dpatch (>= 2), autotools-dev, libtool (>= 1.5), libltdl3-dev, libpam0g-dev, libmysqlclient15-dev | libmysqlclient14-dev | libmysqlclient-dev, libgdbm-dev, libldap2-dev, libsasl2-dev, libiodbc2-dev, libkrb5-dev, libperl-dev, snmp, libsnmp9-dev | libsnmp5-dev | libsnmp4.2-dev, libpq-dev | postgresql-dev, libssl-dev

6. install packages that are required for compiling apt-get install build-essential fakeroot

7. install freeradius dependency apt-get build-dep freeradius

8. in freeradius-1.1.7 run dpkg-buildpackage -rfakeroot

9. cd ..;ls *.deb these are the deb file you had compiled freeradius_1.1.7-0_i386.deb
freeradius-dialupadmin_1.1.7-0_all.deb
freeradius-iodbc_1.1.7-0_i386.deb
freeradius-krb5_1.1.7-0_i386.deb
freeradius-ldap_1.1.7-0_i386.deb
freeradius-mysql_1.1.7-0_i386.deb
freeradius-postgresql_1.1.7-0_i386.deb

10. to install either packages dpkg -i freeradius_1.1.7-0_i386.deb or dpkg -i [package_name.deb]

just in case if need a dh for certs openssl dhparam -check -text -5 512 -out dh