1*8dbcf02cSchristosInteroperability testing of hostapd's IEEE 802.1X/EAPOL authentication 2*8dbcf02cSchristos 3*8dbcf02cSchristosTest matrix 4*8dbcf02cSchristos 5*8dbcf02cSchristos+) tested successfully 6*8dbcf02cSchristosF) failed 7*8dbcf02cSchristos-) peer did not support 8*8dbcf02cSchristos?) not tested 9*8dbcf02cSchristos 10*8dbcf02cSchristosXSupplicant --------------------------------. 11*8dbcf02cSchristosIntel PROSet ---------------------------. | 12*8dbcf02cSchristosWindows XP -------------------------. | | 13*8dbcf02cSchristosMac OS X 10.4 ------------------. | | | 14*8dbcf02cSchristosNokia S60 ------------------. | | | | 15*8dbcf02cSchristoswpa_supplicant ---------. | | | | | 16*8dbcf02cSchristos | | | | | | 17*8dbcf02cSchristos 18*8dbcf02cSchristosEAP-MD5 + - ? ? - 19*8dbcf02cSchristosEAP-GTC + - ? - - 20*8dbcf02cSchristosEAP-MSCHAPv2 + - ? - - 21*8dbcf02cSchristosEAP-TLS + + +1 + + 22*8dbcf02cSchristosEAP-PEAPv0/MSCHAPv2 + + + + + + 23*8dbcf02cSchristosEAP-PEAPv0/GTC + + + - + 24*8dbcf02cSchristosEAP-PEAPv0/MD5 + - + - - 25*8dbcf02cSchristosEAP-PEAPv0/TLS + F - + + 26*8dbcf02cSchristosEAP-PEAPv0/SIM + + - - - 27*8dbcf02cSchristosEAP-PEAPv0/AKA + + - - - 28*8dbcf02cSchristosEAP-PEAPv0/PSK + - - - - 29*8dbcf02cSchristosEAP-PEAPv0/PAX + - - - - 30*8dbcf02cSchristosEAP-PEAPv0/SAKE + - - - - 31*8dbcf02cSchristosEAP-PEAPv0/GPSK + - - - - 32*8dbcf02cSchristosEAP-PEAPv1/MSCHAPv2 + + + - + + 33*8dbcf02cSchristosEAP-PEAPv1/GTC + + + - + 34*8dbcf02cSchristosEAP-PEAPv1/MD5 + - + - - 35*8dbcf02cSchristosEAP-PEAPv1/TLS + F - - + 36*8dbcf02cSchristosEAP-PEAPv1/SIM + + - - - 37*8dbcf02cSchristosEAP-PEAPv1/AKA + + - - - 38*8dbcf02cSchristosEAP-PEAPv1/PSK + - - - - 39*8dbcf02cSchristosEAP-PEAPv1/PAX + - - - - 40*8dbcf02cSchristosEAP-PEAPv1/SAKE + - - - - 41*8dbcf02cSchristosEAP-PEAPv1/GPSK + - - - - 42*8dbcf02cSchristosEAP-TTLS/CHAP + - + - + + 43*8dbcf02cSchristosEAP-TTLS/MSCHAP + - + - + + 44*8dbcf02cSchristosEAP-TTLS/MSCHAPv2 + + + - + + 45*8dbcf02cSchristosEAP-TTLS/PAP + - + - + + 46*8dbcf02cSchristosEAP-TTLS/EAP-MD5 + - - - - + 47*8dbcf02cSchristosEAP-TTLS/EAP-GTC + + - - - 48*8dbcf02cSchristosEAP-TTLS/EAP-MSCHAPv2 + + - - - 49*8dbcf02cSchristosEAP-TTLS/EAP-TLS + F - - - 50*8dbcf02cSchristosEAP-TTLS/EAP-SIM + + - - - 51*8dbcf02cSchristosEAP-TTLS/EAP-AKA + + - - - 52*8dbcf02cSchristosEAP-TTLS + TNC + - - - - 53*8dbcf02cSchristosEAP-SIM + + - - + 54*8dbcf02cSchristosEAP-AKA + + - - - 55*8dbcf02cSchristosEAP-PAX + - - - - 56*8dbcf02cSchristosEAP-SAKE + - - - - 57*8dbcf02cSchristosEAP-GPSK + - - - - 58*8dbcf02cSchristosEAP-FAST/MSCHAPv2(prov) + - F - F 59*8dbcf02cSchristosEAP-FAST/GTC(auth) + - + - + 60*8dbcf02cSchristosEAP-FAST/MSCHAPv2(aprov)+ - F - F 61*8dbcf02cSchristosEAP-FAST/GTC(aprov) + - F - F 62*8dbcf02cSchristosEAP-FAST/MD5(aprov) + - - - - 63*8dbcf02cSchristosEAP-FAST/TLS(aprov) + - - - - 64*8dbcf02cSchristosEAP-FAST/SIM(aprov) + - - - - 65*8dbcf02cSchristosEAP-FAST/AKA(aprov) + - - - - 66*8dbcf02cSchristosEAP-FAST/MSCHAPv2(auth) + - + - + 67*8dbcf02cSchristosEAP-FAST/MD5(auth) + - + - - 68*8dbcf02cSchristosEAP-FAST/TLS(auth) + - - - - 69*8dbcf02cSchristosEAP-FAST/SIM(auth) + - - - - 70*8dbcf02cSchristosEAP-FAST/AKA(auth) + - - - - 71*8dbcf02cSchristosEAP-FAST + TNC + - - - - 72*8dbcf02cSchristosEAP-IKEv2 + - - - - 73*8dbcf02cSchristosEAP-TNC + - - - - 74*8dbcf02cSchristos 75*8dbcf02cSchristos1) EAP-TLS itself worked, but peer certificate validation failed at 76*8dbcf02cSchristos least when using the internal TLS server (peer included incorrect 77*8dbcf02cSchristos certificates in the chain?) 78