More questions on hs20/OSU keys and configuration.

Jouni Malinen j
Wed Mar 25 04:20:14 PDT 2015

On Mon, Mar 23, 2015 at 05:15:19PM -0700, Ben Greear wrote:
> On 03/23/2015 04:14 PM, Ben Greear wrote:
> > INSERT INTO osu_config(realm,field,value) VALUES('','trust_root_cert_fingerprint','5b393a9246865569485c2605c3304e48212b449367858299beba9384c4cf4647');
> And, how are you generating these fingerprints?  When I try creating SH1 or MD5 fingerprints from
> the client-server.pem, I get fewer digits.  And the certs HS20-R2 document didn't offer any specifics that I saw.

Hotspot 2.0 Rel 2 spec describes this since these are for nodes in the PPS
MO. It is SHA256 hash and of the DER (not PEM!) encoded version of the
Jouni Malinen                                            PGP id EFC895FA

More information about the Hostap mailing list