aboutsummaryrefslogtreecommitdiffstats
path: root/hostapd/eap_testing.txt
blob: 04468c39f01eca46062473ec2cf5d47438c4d1c5 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
Interoperability testing of hostapd's IEEE 802.1X/EAPOL authentication

Test matrix

+) tested successfully
F) failed
-) peer did not support
?) not tested

XSupplicant --------------------------------.
Intel PROSet ---------------------------.   |
Windows XP -------------------------.   |   |
Mac OS X 10.4 ------------------.   |   |   |
Nokia S60 ------------------.   |   |   |   |
wpa_supplicant ---------.   |   |   |   |   |
			|   |   |   |   |   |

EAP-MD5			+   -   ?   ?   -
EAP-GTC			+   -   ?   -   -
EAP-MSCHAPv2		+   -   ?   -   -
EAP-TLS			+   +   +1  +   +
EAP-PEAPv0/MSCHAPv2	+   +   +   +   +   +
EAP-PEAPv0/GTC		+   +   +   -   +
EAP-PEAPv0/MD5		+   -   +   -   -
EAP-PEAPv0/TLS		+   F   -   +   +
EAP-PEAPv0/SIM		+   +   -   -   -
EAP-PEAPv0/AKA		+   +   -   -   -
EAP-PEAPv0/PSK		+   -   -   -   -
EAP-PEAPv0/PAX		+   -   -   -   -
EAP-PEAPv0/SAKE		+   -   -   -   -
EAP-PEAPv0/GPSK		+   -   -   -   -
EAP-PEAPv1/MSCHAPv2	+   +   +   -   +   +
EAP-PEAPv1/GTC		+   +   +   -   +
EAP-PEAPv1/MD5		+   -   +   -   -
EAP-PEAPv1/TLS		+   F   -   -   +
EAP-PEAPv1/SIM		+   +   -   -   -
EAP-PEAPv1/AKA		+   +   -   -   -
EAP-PEAPv1/PSK		+   -   -   -   -
EAP-PEAPv1/PAX		+   -   -   -   -
EAP-PEAPv1/SAKE		+   -   -   -   -
EAP-PEAPv1/GPSK		+   -   -   -   -
EAP-TTLS/CHAP		+   -   +   -   +   +
EAP-TTLS/MSCHAP		+   -   +   -   +   +
EAP-TTLS/MSCHAPv2	+   +   +   -   +   +
EAP-TTLS/PAP		+   -   +   -   +   +
EAP-TTLS/EAP-MD5	+   -   -   -   -   +
EAP-TTLS/EAP-GTC	+   +   -   -   -
EAP-TTLS/EAP-MSCHAPv2	+   +   -   -   -
EAP-TTLS/EAP-TLS	+   F   -   -   -
EAP-TTLS/EAP-SIM	+   +   -   -   -
EAP-TTLS/EAP-AKA	+   +   -   -   -
EAP-TTLS + TNC		+   -   -   -   -
EAP-SIM			+   +   -   -   +
EAP-AKA			+   +   -   -   -
EAP-PAX			+   -   -   -   -
EAP-SAKE		+   -   -   -   -
EAP-GPSK		+   -   -   -   -
EAP-FAST/MSCHAPv2(prov)	+   -   F   -   F
EAP-FAST/GTC(auth)	+   -   +   -   +
EAP-FAST/MSCHAPv2(aprov)+   -   F   -   F
EAP-FAST/GTC(aprov)	+   -   F   -   F
EAP-FAST/MD5(aprov)	+   -   -   -   -
EAP-FAST/TLS(aprov)	+   -   -   -   -
EAP-FAST/SIM(aprov)	+   -   -   -   -
EAP-FAST/AKA(aprov)	+   -   -   -   -
EAP-FAST/MSCHAPv2(auth)	+   -   +   -   +
EAP-FAST/MD5(auth)	+   -   +   -   -
EAP-FAST/TLS(auth)	+   -   -   -   -
EAP-FAST/SIM(auth)	+   -   -   -   -
EAP-FAST/AKA(auth)	+   -   -   -   -
EAP-FAST + TNC		+   -   -   -   -
EAP-IKEv2		+   -   -   -   -
EAP-TNC			+   -   -   -   -

1) EAP-TLS itself worked, but peer certificate validation failed at
   least when using the internal TLS server (peer included incorrect
   certificates in the chain?)