[PATCH] Add some documentation relating to EAP-AKA.
j at w1.fi
Tue Jan 7 08:28:37 EST 2014
On Fri, Jan 03, 2014 at 04:10:16PM -0800, greearb at candelatech.com wrote:
> diff --git a/wpa_supplicant/defconfig b/wpa_supplicant/defconfig
> -# gnutls = GnuTLS
> +# gnutls = GnuTLS (Missing some features needed by EAP-AKA with USIM, at least)
This is not exactly complete and I would much rather make this work with
EAP-SIM and EAP-AKA or make the build fail than expect people to notice
and understand this note in defconfig.
> diff --git a/wpa_supplicant/wpa_supplicant.conf b/wpa_supplicant/wpa_supplicant.conf
> @@ -658,6 +658,8 @@ fast_reauth=1
> # identity: Identity string for EAP
> # This field is also used to configure user NAI for
> # EAP-PSK/PAX/SAKE/GPSK.
> +# For EAP-AKA, it is 1 | IMSI
> +# For EAP-SIM, it is 0 | IMSI
That is not correct. EAP-SIM does normally (but not always!) use 1 as
the prefix and EAP-AKA uses 0 (again, not always). Anyway, these would
not normally be configured by users since the identity is generated
automatically based on IMSI read from SIM/USIM. In other words, these
prefixes are reversed and only used in some test scenarios with
simulated SIM/USIM and as such, I don't think it is appropriate to
document these in this style. Furthermore, this is not really even
complete since the realm part is not included. I would be fine listing
the examples for software simulated version if they are marked as such
(and well, obviously, if they are correct).
> # anonymous_identity: Anonymous identity string for EAP (to be used as the
> # unencrypted identity with EAP types that support different tunnelled
> # identity, e.g., EAP-TTLS). This field can also be used with
> @@ -671,6 +673,8 @@ fast_reauth=1
> # PSK) is also configured using this field. For EAP-GPSK, this is a
> # variable length PSK. ext:<name of external password field> format can
> # be used to indicate that the password is stored in external storage.
> +# For EAP-AKA, the syntax is K:OPc:SQN
> +# For EAP-SIM, the syntax is K:OPc
Again, this is very much for special corner cases. This would never be
used in normal EAP-SIM/AKA cases.
Jouni Malinen PGP id EFC895FA
More information about the HostAP