jeltz/hostap
1
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity
hostap/tests/hwsim/auth_serv/as2.conf

25 lines
728 B
Text
Raw Normal View History

tests: EAP-SIM/AKA/AKA' with SQLite Extend EAP-SIM/AKA/AKA' test coverage by setting up another authentication server instance to store dynamic SIM/AKA/AKA' information into an SQLite database. This allows the stored reauth/pseudonym data to be modified on the server side and by doing so, allows testing fallback from reauth to pseudonym/permanent identity. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-05-11 00:06:00 +02:00
driver=none
radius_server_clients=auth_serv/radius_clients.conf
radius_server_auth_port=1814
eap_server=1
eap_user_file=auth_serv/eap_user.conf
interface=as2
ctrl_interface=/var/run/hostapd
ctrl_interface_group=admin
ca_cert=auth_serv/ca.pem
server_cert=auth_serv/server.pem
private_key=auth_serv/server.key
tests: Generate a fresh OCSP response for each test run GnuTLS has a hardcoded three day limit on OCSP response age regardless of the next update value in the response. To make this work in the test scripts, try to generate a new response when starting the authentication server. The old mechanism of a response without next update value is used as a backup option if openssl is not available or fails to generate the response for some reason. Signed-off-by: Jouni Malinen <j@w1.fi>
2015-01-11 19:17:51 +01:00
ocsp_stapling_response=LOGDIR/ocsp-server-cache.der
tests: Remove unnecessary copying of ocsp-multi-server-cache.der This file is not being modified, so the original one from the auth_serv directory can be used directly. Signed-off-by: Jouni Malinen <j@w1.fi>
2019-12-27 18:10:20 +01:00
ocsp_stapling_response_multi=auth_serv/ocsp-multi-server-cache.der
tests: EAP-SIM/AKA/AKA' with SQLite Extend EAP-SIM/AKA/AKA' test coverage by setting up another authentication server instance to store dynamic SIM/AKA/AKA' information into an SQLite database. This allows the stored reauth/pseudonym data to be modified on the server side and by doing so, allows testing fallback from reauth to pseudonym/permanent identity. Signed-off-by: Jouni Malinen <j@w1.fi>
2014-05-11 00:06:00 +02:00
server_id=server2.w1.fi
eap_sim_db=unix:/tmp/hlr_auc_gw.sock db=LOGDIR/hostapd.db
dh_file=auth_serv/dh.conf
pac_opaque_encr_key=000102030405060708090a0b0c0d0e0f
eap_fast_a_id=101112131415161718191a1b1c1d1e1f
eap_fast_a_id_info=test server2
eap_sim_aka_result_ind=1
tests: Write MSK dump files from authentication server This makes it easier to post-process frame capture files if frames need to be decrypted in test cases that do not configure wlantest with the PMK directly (i.e., mainly the cases when a RADIUS server is used). Signed-off-by: Jouni Malinen <jouni@qca.qualcomm.com>
2017-09-05 18:12:29 +02:00
dump_msk_file=LOGDIR/as2-msk.lst
Reference in a new issue Copy permalink