:!: Since 2021 the c-base crew wifi uses a certificate issued by `Let's Encrypt`

<del>Zertifikat runterladen</del>
<code bash>
# This is not necessary anymore!
curl -Ss https://wiki.c-base.org/dokuwiki/_media/c-services:radius.cbrp3.c-base.org.pem > /etc/ssl/certs/radius.cbrp3.c-base.org.pem
</code>

Create a file **/etc/wpa_supplicant/c-base-crew.conf** with this content (change $crewname and $password to your crew name and password):
<code>
  network={
    ssid="c-base-crew"
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="$crewname"
    password="$password"
    ca_cert="<Add the path to the current Let's Encrypt root CA here>"
    subject_match="/CN=radius.cbrp3.c-base.org"
    phase2="auth=MSCHAPV2"
}

</code>
And start it with:

<code bash>
  wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf
</code>

===== Debugging =====
<code bash>
  wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf -ddd
</code>
==== Zertifikate Testen ====
Die Zeilen **ca_cert** und **subject_match** entfernen oder auskommentieren und das ganze noch einmal probieren. Sollte die Verbindung dann klappen bitte noch einmal prüfen ob man das richtige CaCert Zertifikat heruntergeladen hat. Falls ja an <uk@c-base.org> melden.