Collaborate Disseminate
I’m wondering how key negotiation works for WPA2 Enterprise where a clear text protocol like EAP is used to authenticate the user. All the info I was able to find suggests that EAP is an inherently insecure authentication met… Continue reading How are encryption keys derived between NAS and Supplicant for 802.1x when using EAP as authentication method?
If i require a java application software to connect to multiple access points (in various organization) can i re-use the current EAP protocols in access points to connect to them?
For example, today you can configure an acc… Continue reading Can EAP/PEAP protocols be re-used for wired AP authentication
Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate (CA, user, or otherwise)?
If so, what are the security implications?
The reason I ask is: I’m regularly connecting to a particular organization’s … Continue reading Is it possible for an 802.1x network (PEAP/MSCHAPv2) to have no certificate?
I am testing a new WLAN client mode of a device. So that the device can handle preferably every possible case, I have to know which characters and lengths are generally allowed in the SSID, user-name and passphrase.
I’m trying to change the default EAP type in hostapd but I am not able to understand how to do that.
Here’s what I’ve found reading the hostapd.conf file:
> # NAI Realm information
> # One or more realm can be adverti… Continue reading Change default EAP type in hostapd
I set up a rogue EAP access point using hostapd-mana. This lets me capture hashes of credentials which can later be cracked by asleap. However, my Android phone doesn’t automatically connect to my (rogue) AP even though the S… Continue reading Rogue EAP (PEAP) access point to obtain hashes
I’m currently trying to configure PEAP.
I had no problems configuring it without the use of client certificates.
But I want to only accept people who have a valid cert. However,
the clients can still connect without any pr… Continue reading Problem with configuring PEAP to only accept users with client certificate. (freeradius)
I’m currently trying to configure PEAP.
I had no problems configuring it without the use of client certificates.
But I want to only accept people who have a valid cert. However,
the clients can still connect without any pr… Continue reading Problem with configuring PEAP to only accept users with client certificate. (freeradius)
I recently learned about how WPA-PSK works. If I understand correctly, the 4-way handshake enables the protocol to ensure mutual possession of the PMK (and therefor, the PSK) without sending the PMK/PSK over. This way it’s no… Continue reading Certificate validation with 802.1x PEAP