Noticed today that with TLS 1.2 FR and eapol_test 2.4 (and so presumably wpa_supplicant) disagreed on the MPPE keys. Not sure where the fault lies there. Both were running on the same machine, linked against the same version of OpenSSL.
Only allowing TLS 1.0 and 1.1 fixed the problem.
eapol_test also doesn't send the RFC 5077 session ticket extension in the client hello. Stupid eapol_test *grumble*.
Something to raise with Jouni perhaps... Stefan Paetow Moonshot Industry & Research Liaison Coordinator t: +44 (0)1235 822 125 gpg: 0x3FCE5142 xmpp: stefanp@jabber.dev.ja.net skype: stefan.paetow.janet jisc.ac.uk Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc¹s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800. Jisc Collections and Janet Ltd. is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under Company No. number 2881024, VAT No. GB 197 0632 86. The registered office is: Lumen House, Library Avenue, Harwell, Didcot, Oxfordshire, OX11 0SG. T 01235 822200.