Bug 209339

This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux major release.  Product Management has requested further
review of this request by Red Hat Engineering, for potential inclusion in a Red
Hat Enterprise Linux Major release.  This request is not yet committed for
inclusion.

This request was evaluated by Red Hat Product Management for inclusion in a Red
Hat Enterprise Linux maintenance release.  Product Management has requested
further review of this request by Red Hat Engineering, for potential
inclusion in a Red Hat Enterprise Linux Update release for currently deployed
products.  This request is not yet committed for inclusion in an Update
release.

I believe we can do this for 5.2

QE ack for RHEL5.2.  Sounds like we have the hardware in-house and just need to
sort out configuration.

We're going to need OpenSSL changes for EAP-FAST as well since openssl doesn't
fully support RFC 4851...

*** Bug 190640 has been marked as a duplicate of this bug. ***

I am in the same boat with EAP-FAST support.  I was able to get NM to connect to
this EAP-FAST wireless network once, but nothing since then.

I am able to connect to the above network with wpa_supplicant.  Below is the
configuration:

network={
        ssid="wlan"
        proto=RSN
        key_mgmt=WPA-EAP
        pairwise=CCMP
        eap=LEAP
        identity="daly"
        password="password"
        ca_cert=""
        mode=0
        disabled=0
}

This configuration was generated through wpa_gui.

I see from the above that RHEL 5.2 was to have support for this type of network.
 I'm currently 5.2 but am still having issues.

Development Management has reviewed and declined this request.  You may appeal
this decision by reopening this request. 

Ugh, shouldn't have been automatically closed WONTFIX, sorry.  Still a valid
bug; just postponed a bit.

*** This bug has been marked as a duplicate of bug 428181 ***

Support is missing in F9 and F10 as well for EAP-FAST.

(In reply to comment #31)
> Support is missing in F9 and F10 as well for EAP-FAST.

Yeah, but it's not gonna show up in F9 or F10 unless openssl gets updated there too.

openssl now has EAP-FAST support

NM still doesn't list EAP-FAST as an option in F11.  I don't have a production EAP-FAST system available, but I'm pretty sure until that option is there, NM is still dead when it comes to EAP-FAST.

openssl now supports EAP-FAST, please update NM to support it also

I see this BZ is filed against RHEL6, but I also see previous bugs closed as dupes of this that were filed against Fedora, so I'm not sure if this is the most appropriate place to ask about the status of this in F16 as well.  Can anyone provide any insight into EAP-FAST support in F16?

This BZ looks like it is tentatively flagged for RHEL 6.3, but that doesn't help too much with understanding the when this may land in Fedora.

Upstream commits to 0.8.x branch that we need to backport for this:

NM
91a58738622c30130a2f6dfa68da3a971a596534
8679f350e901282c22c7b0da5841588f4d3306e5
81a668ba3106913e2bb233217cca89965276fd3d

editor
0285856d58e5eff391bcf324b63d7985fd4c77a2

And this commit from 0.8.x branch too:
dd562a3dc4eeb7ee64a1835bbf146985a9c91957

And also these commits from 0.8.x branch:
fec7fc4e01b113651ebb5486d9100245bd78f374
977e0db633d17dcb6e9324704d275d5475981cb8
ef9ef7133f0cccadd0ccd2cf57d9bea8aeebbd41

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0832.html