On Mon, 2018-03-12 at 18:55 +0000, Cappalli, Tim (Aruba Security) wrote:
You'll see the EAP server cert in an over the air packet capture.
Wireshark might show it from the EAPoL frames? You can also extract it from the RADIUS EAP-Message attributes if you've got a capture of the RADIUS packets. I've done it manually, but not sure if there's any utilities which will do it. Matthew
On 3/12/18, 2:46 PM, "Freeradius-Users on behalf of Matt Zagrabelny" <freeradius-users-bounces+timc=hpe.com@lists.freeradius.org on behalf of mzagrabe@d.umn.edu> wrote:
Greetings FR-users,
We don't have access to the shared secrets of a RADIUS server performing EAP, but we'd like to download the RADIUS server SSL certs. Is anyone aware of a GNU/Linux utility similar to eapol_test to do this?
I'm not sure if NetworkManager can do it - I've searched the internet a bit.
Is there a proprietary solution that anyone is aware of?
-- Matthew