Skip to content

Commit

Permalink
Fix tests for TTLS/PEAP mutual authentication
Browse files Browse the repository at this point in the history
OpenSSL/wpa_supplicant won't send the client certificate unless we set the VERIFY_PEER flag
  • Loading branch information
arr2036 committed Oct 13, 2015
1 parent 2a81824 commit 8a1f926
Show file tree
Hide file tree
Showing 6 changed files with 71 additions and 2 deletions.
7 changes: 6 additions & 1 deletion src/tests/eapol_test/config/servers.conf
Expand Up @@ -16,7 +16,7 @@ security {
#
# Max outstanding requests
#
max_requests = 100
max_requests = 10000

#
# References by some modules for default thread pool configuration
Expand Down Expand Up @@ -109,6 +109,11 @@ server test {
}

authorize {
if (&User-Name =~ /with.*client.*cert/) {
update control {
EAP-TLS-Require-Client-Cert := yes
}
}
files
eap
}
Expand Down
12 changes: 12 additions & 0 deletions src/tests/eapol_test/eap-ttls-chap.conf
@@ -0,0 +1,12 @@
#
# eapol_test -c eap-ttls-chap.conf -s testing123
#
network={
key_mgmt=WPA-EAP
eap=TTLS
identity="bob"
anonymous_identity="anonymous"
ca_cert="raddb/certs/ca.pem"
password="bob"
phase2="auth=CHAP"
}
17 changes: 17 additions & 0 deletions src/tests/eapol_test/eap-ttls-client-eap-mschapv2.conf
@@ -0,0 +1,17 @@
#
# ./eapol_test -c eap-ttls-client-eap-mschapv2 -s testing123
#
network={
ssid="example"
key_mgmt=WPA-EAP
eap=TTLS
identity="bob"
anonymous_identity="anonymous_with_client_cert"
password="bob"
phase2="autheap=MSCHAPV2"

ca_cert="raddb/certs/ca.pem"
client_cert="raddb/certs/client.crt"
private_key="raddb/certs/client.key"
private_key_passwd="whatever"
}
22 changes: 22 additions & 0 deletions src/tests/eapol_test/eap-ttls-client-eap-tls.conf
@@ -0,0 +1,22 @@
#
# ./eapol_test -c eap-ttls-client-eap-tls -s testing123
#
network={
ssid="example"
key_mgmt=WPA-EAP
eap=TTLS
identity="bob"
anonymous_identity="anonymous_with_client_cert"
password="bob"
phase2="autheap=TLS"

ca_cert="raddb/certs/ca.pem"
client_cert="raddb/certs/client.crt"
private_key="raddb/certs/client.key"
private_key_passwd="whatever"

ca_cert2="raddb/certs/ca.pem"
client_cert2="raddb/certs/client.crt"
private_key2="raddb/certs/client.key"
private_key2_passwd="whatever"
}
2 changes: 1 addition & 1 deletion src/tests/eapol_test/peap-client-mschapv2.conf
Expand Up @@ -6,7 +6,7 @@ network={
key_mgmt=WPA-EAP
eap=PEAP
identity="bob"
anonymous_identity="anonymous"
anonymous_identity="anonymous_with_client_cert"
password="bob"
phase2="auth=MSCHAPV2"
phase1="peapver=0"
Expand Down
13 changes: 13 additions & 0 deletions src/tests/eapol_test/peap-eap-gtc.conf
@@ -0,0 +1,13 @@
#
# ./eapol_test -c peap-eap-gtc.conf -s testing123
#
network={
ssid="example"
key_mgmt=WPA-EAP
eap=PEAP
identity="bob"
anonymous_identity="anonymous"
password="bob"
phase2="autheap=MSCHAPV2"
phase1="peapver=0"
}

0 comments on commit 8a1f926

Please sign in to comment.