off topic - eapol_test alternative

[Matthew Newton]

On Mon, 2018-03-12 at 18:55 +0000, Cappalli, Tim (Aruba Security)
wrote:
> You'll see the EAP server cert in an over the air packet capture.

Wireshark might show it from the EAPoL frames?

You can also extract it from the RADIUS EAP-Message attributes if
you've got a capture of the RADIUS packets. I've done it manually, but
not sure if there's any utilities which will do it.

Matthew



> On 3/12/18, 2:46 PM, "Freeradius-Users on behalf of Matt Zagrabelny"
> <freeradius-users-bounces+timc=hpe.com at lists.freeradius.org on behalf
> of mzagrabe at d.umn.edu> wrote:
> 
>     Greetings FR-users,
>     
>     We don't have access to the shared secrets of a RADIUS server
> performing
>     EAP, but we'd like to download the RADIUS server SSL certs. Is
> anyone aware
>     of a GNU/Linux utility similar to eapol_test to do this?
>     
>     I'm not sure if NetworkManager can do it - I've searched the
> internet a bit.
>     
>     Is there a proprietary solution that anyone is aware of?


-- 
Matthew