RADSEC connection state stuck in local-cert-wait with ECDSA cert. It works with RSA keys.
Working with RSA on switch EX4100.
switch> show network-access radsec state
Radsec state:
destination 50
state open <<<<<<<<<
secs-in-state 7
remainig-secs 4294967295
pause-reason none
acct-support Y
remote-failures 0
tx-requests 0
tx-responses 0
Not working with ECDSA.
state local-cert-wait <<<<<<<
secs-in-state 656
State of the RADSEC connection.
• connecting—Establishing TCP connection.
• ssl-handshake—SSL negotiation in progress.
• open—RADSEC session is established for exchange of RADIUS messages.
• pause—Pause for restart of connection process. The length of the pause is determined by the reason for restarting.
• local-cert-wait—Connection initiated but waiting for local certificate to complete negotiation.
ECDSA doesn't work on the older versions. Device should be on juniper recommended version.https://apps.juniper.net/feature-explorer/feature-info.html?fKey=8745&fn=RADIUS+over+TLS+%28RADSEC%29