This has been fixed in the version in Jessie (2.2.5+dfsg-0.2, see #765871). Building a new backport would fix this problem.
Another option is to edit radiusd.conf, in the section security, add the following line: allow_vulnerable_openssl = yes You can limit this to a list with just the known vulnerabilities, but I don't really see the point in doing that at a Debian system. -- Herwin Weststrate