Smartcards and wpa_supplicant

Jouni Malinen jkmaline at cc.hut.fi
Tue Apr 12 23:20:30 EDT 2005


On Wed, Mar 09, 2005 at 05:36:03PM +0100, Gordon Hecker wrote:

> I have extracted the PIN-through-wpa_cli related changes and created a
> diff containing only those.
> As usual:
> http://ghe.dyndns.org/patches/wpa_supplicant/wpa_supplicant-pin-through-wpa_cli-20050309-2.patch

Thanks. Finally, I got actually started with the merge. The interactive
PIN request is now in CVS.

> There's no code included that makes EAP-SIM or AKA use that
> functionality. I don't want to mess around in that code for now.
> So the patch on its own is pretty useless ;-)

OK. I'll need to do some changes on the PCSC wrapper to allow PIN
requests to be separated from the scard initialization so that the
authentication can be delayed in a bit cleaner way. In case of
EAP-SIM/AKA, the PIN request does not actually come from within EAP
implementation; instead, this is needed even before starting EAP since
Identity is determined by reading PIN-protected IMSI from the SIM..

-- 
Jouni Malinen                                            PGP id EFC895FA



More information about the HostAP mailing list