4. Using TLS Bootstrapping in EAP

Pour EAP, RFC 9966 utilise les mecanismes NAI de RFC 9965. Le username "tls-pok-dpp" MUST etre inclus; l initial identity est "tls-pok-dpp@teap.eap.arpa" et cet identifier MUST etre inclus dans la EAP Identity response.

EAP Peer                EAP Server
--------                ----------
                        <- EAP-Request/
                        Identity

EAP-Response/
Identity
(tls-pok-dpp@teap.eap.arpa) ->

                        <- EAP-Request/
                        EAP-Type=TEAP
                       (TLS Start)

EAP-Response/
EAP-Type=TEAP
(TLS client_hello with
 tls_cert_with_extern_psk
 and pre_shared_key) ->