More questions on hs20/OSU keys and configuration.

[Jouni Malinen]

On Mon, Mar 23, 2015 at 05:15:19PM -0700, Ben Greear wrote:
> On 03/23/2015 04:14 PM, Ben Greear wrote:
> > INSERT INTO osu_config(realm,field,value) VALUES('example.com','trust_root_cert_fingerprint','5b393a9246865569485c2605c3304e48212b449367858299beba9384c4cf4647');
> 
> And, how are you generating these fingerprints?  When I try creating SH1 or MD5 fingerprints from
> the client-server.pem, I get fewer digits.  And the certs HS20-R2 document didn't offer any specifics that I saw.

Hotspot 2.0 Rel 2 spec describes this since these are for nodes in the PPS
MO. It is SHA256 hash and of the DER (not PEM!) encoded version of the
certificate.
 
-- 
Jouni Malinen                                            PGP id EFC895FA