eap_testing.txt 2.52 KB
Newer Older
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77
Interoperability testing of hostapd's IEEE 802.1X/EAPOL authentication

Test matrix

+) tested successfully
F) failed
-) peer did not support
?) not tested

XSupplicant --------------------------------.
Intel PROSet ---------------------------.   |
Windows XP -------------------------.   |   |
Mac OS X 10.4 ------------------.   |   |   |
Nokia S60 ------------------.   |   |   |   |
wpa_supplicant ---------.   |   |   |   |   |
			|   |   |   |   |   |

EAP-MD5			+   -   ?   ?   -
EAP-GTC			+   -   ?   -   -
EAP-MSCHAPv2		+   -   ?   -   -
EAP-TLS			+   +   +1  +   +
EAP-PEAPv0/MSCHAPv2	+   +   +   +   +   +
EAP-PEAPv0/GTC		+   +   +   -   +
EAP-PEAPv0/MD5		+   -   +   -   -
EAP-PEAPv0/TLS		+   F   -   +   +
EAP-PEAPv0/SIM		+   +   -   -   -
EAP-PEAPv0/AKA		+   +   -   -   -
EAP-PEAPv0/PSK		+   -   -   -   -
EAP-PEAPv0/PAX		+   -   -   -   -
EAP-PEAPv0/SAKE		+   -   -   -   -
EAP-PEAPv0/GPSK		+   -   -   -   -
EAP-PEAPv1/MSCHAPv2	+   +   +   -   +   +
EAP-PEAPv1/GTC		+   +   +   -   +
EAP-PEAPv1/MD5		+   -   +   -   -
EAP-PEAPv1/TLS		+   F   -   -   +
EAP-PEAPv1/SIM		+   +   -   -   -
EAP-PEAPv1/AKA		+   +   -   -   -
EAP-PEAPv1/PSK		+   -   -   -   -
EAP-PEAPv1/PAX		+   -   -   -   -
EAP-PEAPv1/SAKE		+   -   -   -   -
EAP-PEAPv1/GPSK		+   -   -   -   -
EAP-TTLS/CHAP		+   -   +   -   +   +
EAP-TTLS/MSCHAP		+   -   +   -   +   +
EAP-TTLS/MSCHAPv2	+   +   +   -   +   +
EAP-TTLS/PAP		+   -   +   -   +   +
EAP-TTLS/EAP-MD5	+   -   -   -   -   +
EAP-TTLS/EAP-GTC	+   +   -   -   -
EAP-TTLS/EAP-MSCHAPv2	+   +   -   -   -
EAP-TTLS/EAP-TLS	+   F   -   -   -
EAP-TTLS/EAP-SIM	+   +   -   -   -
EAP-TTLS/EAP-AKA	+   +   -   -   -
EAP-TTLS + TNC		+   -   -   -   -
EAP-SIM			+   +   -   -   +
EAP-AKA			+   +   -   -   -
EAP-PAX			+   -   -   -   -
EAP-SAKE		+   -   -   -   -
EAP-GPSK		+   -   -   -   -
EAP-FAST/MSCHAPv2(prov)	+   -   F   -   F
EAP-FAST/GTC(auth)	+   -   +   -   +
EAP-FAST/MSCHAPv2(aprov)+   -   F   -   F
EAP-FAST/GTC(aprov)	+   -   F   -   F
EAP-FAST/MD5(aprov)	+   -   -   -   -
EAP-FAST/TLS(aprov)	+   -   -   -   -
EAP-FAST/SIM(aprov)	+   -   -   -   -
EAP-FAST/AKA(aprov)	+   -   -   -   -
EAP-FAST/MSCHAPv2(auth)	+   -   +   -   +
EAP-FAST/MD5(auth)	+   -   +   -   -
EAP-FAST/TLS(auth)	+   -   -   -   -
EAP-FAST/SIM(auth)	+   -   -   -   -
EAP-FAST/AKA(auth)	+   -   -   -   -
EAP-FAST + TNC		+   -   -   -   -
EAP-IKEv2		+   -   -   -   -
EAP-TNC			+   -   -   -   -

1) EAP-TLS itself worked, but peer certificate validation failed at
   least when using the internal TLS server (peer included incorrect
   certificates in the chain?)