139beb93cSSam LefflerInteroperability testing of hostapd's IEEE 802.1X/EAPOL authentication 239beb93cSSam Leffler 339beb93cSSam LefflerTest matrix 439beb93cSSam Leffler 539beb93cSSam Leffler+) tested successfully 639beb93cSSam LefflerF) failed 739beb93cSSam Leffler-) peer did not support 839beb93cSSam Leffler?) not tested 939beb93cSSam Leffler 1039beb93cSSam LefflerXSupplicant --------------------------------. 1139beb93cSSam LefflerIntel PROSet ---------------------------. | 1239beb93cSSam LefflerWindows XP -------------------------. | | 1339beb93cSSam LefflerMac OS X 10.4 ------------------. | | | 1439beb93cSSam LefflerNokia S60 ------------------. | | | | 1539beb93cSSam Lefflerwpa_supplicant ---------. | | | | | 1639beb93cSSam Leffler | | | | | | 1739beb93cSSam Leffler 1839beb93cSSam LefflerEAP-MD5 + - ? ? - 1939beb93cSSam LefflerEAP-GTC + - ? - - 2039beb93cSSam LefflerEAP-MSCHAPv2 + - ? - - 2139beb93cSSam LefflerEAP-TLS + + +1 + + 2239beb93cSSam LefflerEAP-PEAPv0/MSCHAPv2 + + + + + + 2339beb93cSSam LefflerEAP-PEAPv0/GTC + + + - + 2439beb93cSSam LefflerEAP-PEAPv0/MD5 + - + - - 2539beb93cSSam LefflerEAP-PEAPv0/TLS + F - + + 2639beb93cSSam LefflerEAP-PEAPv0/SIM + + - - - 2739beb93cSSam LefflerEAP-PEAPv0/AKA + + - - - 2839beb93cSSam LefflerEAP-PEAPv0/PSK + - - - - 2939beb93cSSam LefflerEAP-PEAPv0/PAX + - - - - 3039beb93cSSam LefflerEAP-PEAPv0/SAKE + - - - - 3139beb93cSSam LefflerEAP-PEAPv0/GPSK + - - - - 3239beb93cSSam LefflerEAP-PEAPv1/MSCHAPv2 + + + - + + 3339beb93cSSam LefflerEAP-PEAPv1/GTC + + + - + 3439beb93cSSam LefflerEAP-PEAPv1/MD5 + - + - - 3539beb93cSSam LefflerEAP-PEAPv1/TLS + F - - + 3639beb93cSSam LefflerEAP-PEAPv1/SIM + + - - - 3739beb93cSSam LefflerEAP-PEAPv1/AKA + + - - - 3839beb93cSSam LefflerEAP-PEAPv1/PSK + - - - - 3939beb93cSSam LefflerEAP-PEAPv1/PAX + - - - - 4039beb93cSSam LefflerEAP-PEAPv1/SAKE + - - - - 4139beb93cSSam LefflerEAP-PEAPv1/GPSK + - - - - 4239beb93cSSam LefflerEAP-TTLS/CHAP + - + - + + 4339beb93cSSam LefflerEAP-TTLS/MSCHAP + - + - + + 4439beb93cSSam LefflerEAP-TTLS/MSCHAPv2 + + + - + + 4539beb93cSSam LefflerEAP-TTLS/PAP + - + - + + 4639beb93cSSam LefflerEAP-TTLS/EAP-MD5 + - - - - + 4739beb93cSSam LefflerEAP-TTLS/EAP-GTC + + - - - 4839beb93cSSam LefflerEAP-TTLS/EAP-MSCHAPv2 + + - - - 4939beb93cSSam LefflerEAP-TTLS/EAP-TLS + F - - - 5039beb93cSSam LefflerEAP-TTLS/EAP-SIM + + - - - 5139beb93cSSam LefflerEAP-TTLS/EAP-AKA + + - - - 5239beb93cSSam LefflerEAP-TTLS + TNC + - - - - 5339beb93cSSam LefflerEAP-SIM + + - - + 5439beb93cSSam LefflerEAP-AKA + + - - - 5539beb93cSSam LefflerEAP-PAX + - - - - 5639beb93cSSam LefflerEAP-SAKE + - - - - 5739beb93cSSam LefflerEAP-GPSK + - - - - 5839beb93cSSam LefflerEAP-FAST/MSCHAPv2(prov) + - F - F 5939beb93cSSam LefflerEAP-FAST/GTC(auth) + - + - + 6039beb93cSSam LefflerEAP-FAST/MSCHAPv2(aprov)+ - F - F 6139beb93cSSam LefflerEAP-FAST/GTC(aprov) + - F - F 6239beb93cSSam LefflerEAP-FAST/MD5(aprov) + - - - - 6339beb93cSSam LefflerEAP-FAST/TLS(aprov) + - - - - 6439beb93cSSam LefflerEAP-FAST/SIM(aprov) + - - - - 6539beb93cSSam LefflerEAP-FAST/AKA(aprov) + - - - - 6639beb93cSSam LefflerEAP-FAST/MSCHAPv2(auth) + - + - + 6739beb93cSSam LefflerEAP-FAST/MD5(auth) + - + - - 6839beb93cSSam LefflerEAP-FAST/TLS(auth) + - - - - 6939beb93cSSam LefflerEAP-FAST/SIM(auth) + - - - - 7039beb93cSSam LefflerEAP-FAST/AKA(auth) + - - - - 7139beb93cSSam LefflerEAP-FAST + TNC + - - - - 7239beb93cSSam LefflerEAP-IKEv2 + - - - - 7339beb93cSSam LefflerEAP-TNC + - - - - 7439beb93cSSam Leffler 7539beb93cSSam Leffler1) EAP-TLS itself worked, but peer certificate validation failed at 7639beb93cSSam Leffler least when using the internal TLS server (peer included incorrect 7739beb93cSSam Leffler certificates in the chain?) 78