off topic - eapol_test alternative

Matthew Newton mcn at
Mon Mar 12 20:05:25 CET 2018

On Mon, 2018-03-12 at 18:55 +0000, Cappalli, Tim (Aruba Security)
> You'll see the EAP server cert in an over the air packet capture.

Wireshark might show it from the EAPoL frames?

You can also extract it from the RADIUS EAP-Message attributes if
you've got a capture of the RADIUS packets. I've done it manually, but
not sure if there's any utilities which will do it.


> ´╗┐On 3/12/18, 2:46 PM, "Freeradius-Users on behalf of Matt Zagrabelny"
> < at on behalf
> of mzagrabe at> wrote:
>     Greetings FR-users,
>     We don't have access to the shared secrets of a RADIUS server
> performing
>     EAP, but we'd like to download the RADIUS server SSL certs. Is
> anyone aware
>     of a GNU/Linux utility similar to eapol_test to do this?
>     I'm not sure if NetworkManager can do it - I've searched the
> internet a bit.
>     Is there a proprietary solution that anyone is aware of?


More information about the Freeradius-Users mailing list