mcnewton/freeradius-server — comment on commit f73496894694c8a100e625bb751363c773e4852a
File: raddb/mods-available/eap line 316
By alandekok:

That concerns me a bit. It means that the PEAP config has a bunch more TLS configuration items, which *might* conflict with the PEAP ones.

How about this logic instead:

- no "tls" item == use EAP-TLS configuration
- if "tls" is a CONF_PAIR, treat it as a reference to a configuration.
- if "tls" is a CONF_SECTION, treat it as an in-line TLS configuration section

It's a little more code, but clearer to the end user, I think