Comment 63 for bug 969343

On Thu, Jun 28, 2012 at 1:51 PM, Diane Trout <email address hidden> wrote:
[...]
> Would it be too obnoxious to add a configuration option to wpa
> supplicant that allows manually twiddling flags on the
> SSL_set_options(conn->ssl, options); call? Or would it be better to come
> up some test tool that can test the various combinations of extensions
> with 802.1x authentication?

Patches are welcome ;)

However, that's only something I'd change in development release, not
in a stable release.

Setting the options as a parameter seems rather complex though, since
you'd probably have to do that as a value that would then get
bit-shifted to set the appropriate options, and perhaps ORed with the
other options that should be set automatically by the wpasupplicant
code. A big can of worms ;)

As for testing the extensions with 802.1x; the issue you're most
likely to get into is that different vendors support different
extensions with different levels of success, so you're still bound to
run into things that break horribly every once in a while.

Mathieu Trudel-Lapierre <email address hidden>
Freenode: cyphermox, Jabber: <email address hidden>
4096R/EE018C93 1967 8F7D 03A1 8F38 732E FF82 C126 33E1 EE01 8C93