Any known problems with 802.1w together with 802.1x?
Sat Jun 6 07:13:46 PDT 2015
On Mon, Jun 01, 2015 at 02:27:39PM -0700, Ben Greear wrote:
> Actually, I'm having a hard time finding any info on exactly what combinations
> are supposed to be valid. It seems that PSK + PMF works, but WPA-EAP
> will not work.
I'm not sure what you mean with "WPA-EAP will not work". WPA-EAP works
fine with PMF.
> Should we modify supplicant to require the 256 bit version of PSK for PMF?
No, there is no such requirement.
> Or, should we modify supplicant to allow 128-bit EAP to work for PMF?
What do you mean with "128-bit EAP"? If that is referring to using SHA-1
-based AKM, wpa_supplicant already allows this.
Jouni Malinen PGP id EFC895FA
More information about the Hostap