add basic testing readme
Signed-off-by: Jens Langhammer <jens@goauthentik.io>
This commit is contained in:
		
							
								
								
									
										44
									
								
								internal/outpost/radius/eap/README.md
									
									
									
									
									
										Normal file
									
								
							
							
						
						
									
										44
									
								
								internal/outpost/radius/eap/README.md
									
									
									
									
									
										Normal file
									
								
							| @ -0,0 +1,44 @@ | ||||
| # EAP protocol implementation | ||||
|  | ||||
| Install `eapol_test` (`sudo apt install eapoltest`) | ||||
|  | ||||
| Both PEAP and EAP-TLS require a minimal PKI setup. A CA, a certificate for the server and for EAP-TLS a client certificate need to be provided. | ||||
|  | ||||
| Save either of the config files below and run eapoltest like so: | ||||
|  | ||||
| ``` | ||||
| # peap.conf is the config file under the PEAP testing section | ||||
| # foo is the shared RADIUS secret | ||||
| # 1.2.3.4 is the IP of the RADIUS server | ||||
| eapol_test -c peap.conf -s foo -a 1.2.3.4 | ||||
| ``` | ||||
|  | ||||
| ### PEAP testing | ||||
|  | ||||
| ``` | ||||
| network={ | ||||
|     ssid="DoesNotMatterForThisTest" | ||||
|     key_mgmt=WPA-EAP | ||||
|     eap=PEAP | ||||
|     identity="foo" | ||||
|     password="bar" | ||||
|     ca_cert="ca.pem" | ||||
|     phase2="eapauth=MSCHAPV2" | ||||
| } | ||||
| ``` | ||||
|  | ||||
| ### EAP-TLS testing | ||||
|  | ||||
| ``` | ||||
| network={ | ||||
|     ssid="DoesNotMatterForThisTest" | ||||
|     key_mgmt=WPA-EAP | ||||
|     eap=TLS | ||||
|     identity="foo" | ||||
|     ca_cert="ca.pem" | ||||
|     client_cert="cert_client.pem" | ||||
|     private_key="cert_client.key" | ||||
|     eapol_flags=3 | ||||
|     eap_workaround=0 | ||||
| } | ||||
| ``` | ||||
		Reference in New Issue
	
	Block a user
	 Jens Langhammer
					Jens Langhammer