handshake-timeout

Sets the maximum time Radiator waits for TLS negotiation after establishing the TCP connection. The default is 5s.

Set the timeout above normal TLS negotiation latency but low enough to detect failed peers promptly. Increasing it tolerates slower negotiation but delays fallback and customer responses when the handshake cannot succeed. It also keeps background connection attempts pending longer.

connect {
    protocol tls;
    host "radsec.example.org";
    port 2083;

    tls {
        handshake-timeout 5s;
        server_ca_certificate "RADSEC_SERVER_CA";
    }
}

This parameter accepts values greater than zero and no longer than 365d. It supports duration units.