Version 33.4.1 adds support for validating RADIUS TLS server certificates using a reference identifier, enhancing compliance with Common Criteria requirements. This allows administrators to configure a reference identifier that is matched against the Subject Alternative Name (SAN) or Common Name (CN) in the server's certificate. This also ensures that the TLS session is only established if the identifier matches, improving security.
If the reference identifier configured does not match the SAN/CN of the peer certificate, the TLS session will not be established.
All platforms.