What is needed to support EAP-AKA with HS20?

[Ben Greear]

On 03/04/2014 12:01 PM, Jouni Malinen wrote:
> On Tue, Mar 04, 2014 at 10:47:50AM -0800, Ben Greear wrote:
>> In case it matters, we are using eap-aka with usim.
>>
>> I instrumented the code, and it fails the eap->method test
>> (method is 23).
>>
>> static int nai_realm_cred_username(struct nai_realm_eap *eap, struct wpa_supplicant *wpa_s)
> 
> I would not expect NAI Realm list mechanism to be used with SIM/USIM
> credentials.
> 
>> Any idea what needs to be done to get this working?
> 
> Use the 3GPP Cellular Network information instead of NAI Realm list to
> indicate that SIM/USIM credentials can be used in the network.

Would this be the pertinent example?

#cred={
#	imsi="310026-000000000"
#	milenage="90dca4eda45b53cf0f12d7c9c3bc6a89:cb9cccc4b9258e6dca4760379fb82"
#}
#

And if so, in the example conf, there is this:

# milenage: Milenage parameters for SIM/USIM simulator in <Ki>:<OPc>:<SQN>
#       format


Looks like we don't really care about SQN when configuring a 'cred' section?

Thanks,
Ben

-- 
Ben Greear <greearb at candelatech.com>
Candela Technologies Inc  http://www.candelatech.com