EAP TTLS: Getting the EMSK key?

[Alan DeKok]

Daniel wrote:
> I am new to radius and am using it in for a wimax based EAP TLS/TTLS
> network. 
> Right now, I have freeradius 1.1.7 already installed and working. 

  It won't really work for WiMAX.  You'll need 2.1.10, or maybe even the
most recent git "master" branch.

> What I need is to retrieve the calculated EMSK key (for testing purposes)
> from the radius server to the NAS. 
> I have managed to get the MSK key, but for some reason I cannot retrieve the
> EMSK key. 
> What do I need to do?

  Edit the source code to export the EMSK.  It's not *supposed* to be
exported for security reasons.

>  Would upgrading to a newer version of freeradius help? 

  No.

  Alan DeKok.