Re: [Emu] More TEAP issues

2022-12-16 Thread Alan DeKok
On Dec 16, 2022, at 6:42 AM, Owen Friel (ofriel) wrote: > > There are a few useful TLVs defined in > https://datatracker.ietf.org/doc/html/draft-lear-eap-teap-brski-06 > > CSR Attributes as Eliot has mentioned, as well as e.g. Retry-After TLV which > could be useful if the TEAP server has to

Re: [Emu] More TEAP issues

2022-12-16 Thread Owen Friel (ofriel)
To: Joseph Salowey ; Alan DeKok Cc: EMU WG Subject: Re: [Emu] More TEAP issues I'd support a revision as well.  See below: On 30.11.22 02:14, Joseph Salowey wrote: > [Joe] speaking as a participant, I'd be happy to assist with a > revision.  I think it is needed.  Most of the current

Re: [Emu] More TEAP issues

2022-11-30 Thread Jouni Malinen
On Wed, Nov 30, 2022 at 03:01:08PM +, Alexander Clouter wrote: > On Tue, 29 Nov 2022, at 22:34, Alan DeKok wrote: > > Based on interoperability testing, it looks like implementations > > followed EAP-FAST for derivation of the MS-MPPE keys, and not RFC 7170: > EAP-FAST almost does not

Re: [Emu] More TEAP issues

2022-11-30 Thread Alexander Clouter
Hello, On Tue, 29 Nov 2022, at 22:34, Alan DeKok wrote: > Based on interoperability testing, it looks like implementations > followed EAP-FAST for derivation of the MS-MPPE keys, and not RFC 7170: > > http://lists.infradead.org/pipermail/hostap/2022-July/040639.html > >

Re: [Emu] More TEAP issues

2022-11-30 Thread Alan DeKok
On Nov 30, 2022, at 1:24 AM, Eliot Lear wrote: > I'd also like to take some time to consider what additional TLVs may be > required. Right now there is an incongruence between TEAP and other > protocols that sign certs in that there is no CSR attributes TLV. There may > be several others to

Re: [Emu] More TEAP issues

2022-11-29 Thread Eliot Lear
I'd support a revision as well.  See below: On 30.11.22 02:14, Joseph Salowey wrote: [Joe] speaking as a participant, I'd be happy to assist with a revision.  I think it is needed.  Most of the current errata are tracked here - https://github.com/emu-wg/teap-errata/pulls. I think the target

Re: [Emu] More TEAP issues

2022-11-29 Thread Joseph Salowey
On Tue, Nov 29, 2022 at 2:35 PM Alan DeKok wrote: > Based on interoperability testing, it looks like implementations > followed EAP-FAST for derivation of the MS-MPPE keys, and not RFC 7170: > > http://lists.infradead.org/pipermail/hostap/2022-July/040639.html > >

[Emu] More TEAP issues

2022-11-29 Thread Alan DeKok
Based on interoperability testing, it looks like implementations followed EAP-FAST for derivation of the MS-MPPE keys, and not RFC 7170: http://lists.infradead.org/pipermail/hostap/2022-July/040639.html http://lists.infradead.org/pipermail/hostap/2022-November/041060.html I think this