xref: /freebsd/contrib/wpa/hostapd/eap_testing.txt (revision 2e3507c25e42292b45a5482e116d278f5515d04d)
1Interoperability testing of hostapd's IEEE 802.1X/EAPOL authentication
2
3Test matrix
4
5+) tested successfully
6F) failed
7-) peer did not support
8?) not tested
9
10XSupplicant --------------------------------.
11Intel PROSet ---------------------------.   |
12Windows XP -------------------------.   |   |
13Mac OS X 10.4 ------------------.   |   |   |
14Nokia S60 ------------------.   |   |   |   |
15wpa_supplicant ---------.   |   |   |   |   |
16			|   |   |   |   |   |
17
18EAP-MD5			+   -   ?   ?   -
19EAP-GTC			+   -   ?   -   -
20EAP-MSCHAPv2		+   -   ?   -   -
21EAP-TLS			+   +   +1  +   +
22EAP-PEAPv0/MSCHAPv2	+   +   +   +   +   +
23EAP-PEAPv0/GTC		+   +   +   -   +
24EAP-PEAPv0/MD5		+   -   +   -   -
25EAP-PEAPv0/TLS		+   F   -   +   +
26EAP-PEAPv0/SIM		+   +   -   -   -
27EAP-PEAPv0/AKA		+   +   -   -   -
28EAP-PEAPv0/PSK		+   -   -   -   -
29EAP-PEAPv0/PAX		+   -   -   -   -
30EAP-PEAPv0/SAKE		+   -   -   -   -
31EAP-PEAPv0/GPSK		+   -   -   -   -
32EAP-PEAPv1/MSCHAPv2	+   +   +   -   +   +
33EAP-PEAPv1/GTC		+   +   +   -   +
34EAP-PEAPv1/MD5		+   -   +   -   -
35EAP-PEAPv1/TLS		+   F   -   -   +
36EAP-PEAPv1/SIM		+   +   -   -   -
37EAP-PEAPv1/AKA		+   +   -   -   -
38EAP-PEAPv1/PSK		+   -   -   -   -
39EAP-PEAPv1/PAX		+   -   -   -   -
40EAP-PEAPv1/SAKE		+   -   -   -   -
41EAP-PEAPv1/GPSK		+   -   -   -   -
42EAP-TTLS/CHAP		+   -   +   -   +   +
43EAP-TTLS/MSCHAP		+   -   +   -   +   +
44EAP-TTLS/MSCHAPv2	+   +   +   -   +   +
45EAP-TTLS/PAP		+   -   +   -   +   +
46EAP-TTLS/EAP-MD5	+   -   -   -   -   +
47EAP-TTLS/EAP-GTC	+   +   -   -   -
48EAP-TTLS/EAP-MSCHAPv2	+   +   -   -   -
49EAP-TTLS/EAP-TLS	+   F   -   -   -
50EAP-TTLS/EAP-SIM	+   +   -   -   -
51EAP-TTLS/EAP-AKA	+   +   -   -   -
52EAP-TTLS + TNC		+   -   -   -   -
53EAP-SIM			+   +   -   -   +
54EAP-AKA			+   +   -   -   -
55EAP-PAX			+   -   -   -   -
56EAP-SAKE		+   -   -   -   -
57EAP-GPSK		+   -   -   -   -
58EAP-FAST/MSCHAPv2(prov)	+   -   F   -   F
59EAP-FAST/GTC(auth)	+   -   +   -   +
60EAP-FAST/MSCHAPv2(aprov)+   -   F   -   F
61EAP-FAST/GTC(aprov)	+   -   F   -   F
62EAP-FAST/MD5(aprov)	+   -   -   -   -
63EAP-FAST/TLS(aprov)	+   -   -   -   -
64EAP-FAST/SIM(aprov)	+   -   -   -   -
65EAP-FAST/AKA(aprov)	+   -   -   -   -
66EAP-FAST/MSCHAPv2(auth)	+   -   +   -   +
67EAP-FAST/MD5(auth)	+   -   +   -   -
68EAP-FAST/TLS(auth)	+   -   -   -   -
69EAP-FAST/SIM(auth)	+   -   -   -   -
70EAP-FAST/AKA(auth)	+   -   -   -   -
71EAP-FAST + TNC		+   -   -   -   -
72EAP-IKEv2		+   -   -   -   -
73EAP-TNC			+   -   -   -   -
74
751) EAP-TLS itself worked, but peer certificate validation failed at
76   least when using the internal TLS server (peer included incorrect
77   certificates in the chain?)
78