rad_eap_test
rad_eap_test copied to clipboard
new options for TLS protocol selection and generic phase1 options
Add new option -L to allow selecting specific TLS protocols to enable.
Protocol names match existing use of OpenSSL config (so TLSv1.0 is "TLSv1").
The TLS protocol selection is translated into phase1 options included in the wpa_supplicant (eapol_test) configuration file (tls_disable_tlsv1_0, tls_disable_tlsv1_1, tls_disable_tlsv1_2, and tls_disable_tlsv1_3).
Example: enable only TLSv1.2 and TLSv1.3:
-L TLSv1.2,TLSv1.3
Add also option -1 to allow also passing other phase1 settings directly (as per https://w1.fi/cgit/hostap/plain/wpa_supplicant/wpa_supplicant.conf)
Example: force PEAP version 0 and use cryptobinding if server supports it
-1 'peapver=0 crypto_binding=1'
Ah, I see the functionality here very much overlaps with #20 - either that PR or this one will provide the functionality.
(This PR also adds short-cuts via -L TLSv1.2,TLSv1.1,TLSv1.2 )
One more substantial difference is #20 also sets the default to exclude TLSv1.3 ....