xref: /freebsd-src/contrib/wpa/hostapd/eap_testing.txt (revision 10b3b54548f2290bbe8d8f88c59c28d12b7a635d)
1*39beb93cSSam LefflerInteroperability testing of hostapd's IEEE 802.1X/EAPOL authentication
2*39beb93cSSam Leffler
3*39beb93cSSam LefflerTest matrix
4*39beb93cSSam Leffler
5*39beb93cSSam Leffler+) tested successfully
6*39beb93cSSam LefflerF) failed
7*39beb93cSSam Leffler-) peer did not support
8*39beb93cSSam Leffler?) not tested
9*39beb93cSSam Leffler
10*39beb93cSSam LefflerXSupplicant --------------------------------.
11*39beb93cSSam LefflerIntel PROSet ---------------------------.   |
12*39beb93cSSam LefflerWindows XP -------------------------.   |   |
13*39beb93cSSam LefflerMac OS X 10.4 ------------------.   |   |   |
14*39beb93cSSam LefflerNokia S60 ------------------.   |   |   |   |
15*39beb93cSSam Lefflerwpa_supplicant ---------.   |   |   |   |   |
16*39beb93cSSam Leffler			|   |   |   |   |   |
17*39beb93cSSam Leffler
18*39beb93cSSam LefflerEAP-MD5			+   -   ?   ?   -
19*39beb93cSSam LefflerEAP-GTC			+   -   ?   -   -
20*39beb93cSSam LefflerEAP-MSCHAPv2		+   -   ?   -   -
21*39beb93cSSam LefflerEAP-TLS			+   +   +1  +   +
22*39beb93cSSam LefflerEAP-PEAPv0/MSCHAPv2	+   +   +   +   +   +
23*39beb93cSSam LefflerEAP-PEAPv0/GTC		+   +   +   -   +
24*39beb93cSSam LefflerEAP-PEAPv0/MD5		+   -   +   -   -
25*39beb93cSSam LefflerEAP-PEAPv0/TLS		+   F   -   +   +
26*39beb93cSSam LefflerEAP-PEAPv0/SIM		+   +   -   -   -
27*39beb93cSSam LefflerEAP-PEAPv0/AKA		+   +   -   -   -
28*39beb93cSSam LefflerEAP-PEAPv0/PSK		+   -   -   -   -
29*39beb93cSSam LefflerEAP-PEAPv0/PAX		+   -   -   -   -
30*39beb93cSSam LefflerEAP-PEAPv0/SAKE		+   -   -   -   -
31*39beb93cSSam LefflerEAP-PEAPv0/GPSK		+   -   -   -   -
32*39beb93cSSam LefflerEAP-PEAPv1/MSCHAPv2	+   +   +   -   +   +
33*39beb93cSSam LefflerEAP-PEAPv1/GTC		+   +   +   -   +
34*39beb93cSSam LefflerEAP-PEAPv1/MD5		+   -   +   -   -
35*39beb93cSSam LefflerEAP-PEAPv1/TLS		+   F   -   -   +
36*39beb93cSSam LefflerEAP-PEAPv1/SIM		+   +   -   -   -
37*39beb93cSSam LefflerEAP-PEAPv1/AKA		+   +   -   -   -
38*39beb93cSSam LefflerEAP-PEAPv1/PSK		+   -   -   -   -
39*39beb93cSSam LefflerEAP-PEAPv1/PAX		+   -   -   -   -
40*39beb93cSSam LefflerEAP-PEAPv1/SAKE		+   -   -   -   -
41*39beb93cSSam LefflerEAP-PEAPv1/GPSK		+   -   -   -   -
42*39beb93cSSam LefflerEAP-TTLS/CHAP		+   -   +   -   +   +
43*39beb93cSSam LefflerEAP-TTLS/MSCHAP		+   -   +   -   +   +
44*39beb93cSSam LefflerEAP-TTLS/MSCHAPv2	+   +   +   -   +   +
45*39beb93cSSam LefflerEAP-TTLS/PAP		+   -   +   -   +   +
46*39beb93cSSam LefflerEAP-TTLS/EAP-MD5	+   -   -   -   -   +
47*39beb93cSSam LefflerEAP-TTLS/EAP-GTC	+   +   -   -   -
48*39beb93cSSam LefflerEAP-TTLS/EAP-MSCHAPv2	+   +   -   -   -
49*39beb93cSSam LefflerEAP-TTLS/EAP-TLS	+   F   -   -   -
50*39beb93cSSam LefflerEAP-TTLS/EAP-SIM	+   +   -   -   -
51*39beb93cSSam LefflerEAP-TTLS/EAP-AKA	+   +   -   -   -
52*39beb93cSSam LefflerEAP-TTLS + TNC		+   -   -   -   -
53*39beb93cSSam LefflerEAP-SIM			+   +   -   -   +
54*39beb93cSSam LefflerEAP-AKA			+   +   -   -   -
55*39beb93cSSam LefflerEAP-PAX			+   -   -   -   -
56*39beb93cSSam LefflerEAP-SAKE		+   -   -   -   -
57*39beb93cSSam LefflerEAP-GPSK		+   -   -   -   -
58*39beb93cSSam LefflerEAP-FAST/MSCHAPv2(prov)	+   -   F   -   F
59*39beb93cSSam LefflerEAP-FAST/GTC(auth)	+   -   +   -   +
60*39beb93cSSam LefflerEAP-FAST/MSCHAPv2(aprov)+   -   F   -   F
61*39beb93cSSam LefflerEAP-FAST/GTC(aprov)	+   -   F   -   F
62*39beb93cSSam LefflerEAP-FAST/MD5(aprov)	+   -   -   -   -
63*39beb93cSSam LefflerEAP-FAST/TLS(aprov)	+   -   -   -   -
64*39beb93cSSam LefflerEAP-FAST/SIM(aprov)	+   -   -   -   -
65*39beb93cSSam LefflerEAP-FAST/AKA(aprov)	+   -   -   -   -
66*39beb93cSSam LefflerEAP-FAST/MSCHAPv2(auth)	+   -   +   -   +
67*39beb93cSSam LefflerEAP-FAST/MD5(auth)	+   -   +   -   -
68*39beb93cSSam LefflerEAP-FAST/TLS(auth)	+   -   -   -   -
69*39beb93cSSam LefflerEAP-FAST/SIM(auth)	+   -   -   -   -
70*39beb93cSSam LefflerEAP-FAST/AKA(auth)	+   -   -   -   -
71*39beb93cSSam LefflerEAP-FAST + TNC		+   -   -   -   -
72*39beb93cSSam LefflerEAP-IKEv2		+   -   -   -   -
73*39beb93cSSam LefflerEAP-TNC			+   -   -   -   -
74*39beb93cSSam Leffler
75*39beb93cSSam Leffler1) EAP-TLS itself worked, but peer certificate validation failed at
76*39beb93cSSam Leffler   least when using the internal TLS server (peer included incorrect
77*39beb93cSSam Leffler   certificates in the chain?)
78