[PATCH 2/4] Add some documentation relating to EAP-AKA.

[Ben Greear]

On 01/14/2015 04:07 PM, Jouni Malinen wrote:
> On Mon, Jan 12, 2015 at 02:15:46PM -0800, greearb at candelatech.com wrote:
>> -# gnutls = GnuTLS
>> +# gnutls = GnuTLS (Missing some features needed by EAP-AKA with USIM, at least)
>
> Could you please clarify this? What in EAP-AKA is not working with
> GnuTLS? I'd rather fix that than document that things don't work :).

I believe the problem was bad or missing fips186_2_prf() method.

Here's a link to an earlier discussion...possibly the problem has
been fixed already.

http://lists.shmoo.com/pipermail/hostap/2014-January/029308.html

Thanks,
Ben

>
> The hwsim test cases for EAP-AKA (and EAP-AKA' for that matter) pass
> without issues both with OpenSSL and GnuTLS as the crypto library for
> wpa_supplicant.
>

-- 
Ben Greear <greearb at candelatech.com>
Candela Technologies Inc  http://www.candelatech.com