:!: Since 2021 the c-base crew wifi uses a certificate issued by `Let's Encrypt`

Zertifikat runterladen

# This is not necessary anymore!
curl -Ss https://wiki.c-base.org/dokuwiki/_media/c-services:radius.cbrp3.c-base.org.pem > /etc/ssl/certs/radius.cbrp3.c-base.org.pem

Create a file /etc/wpa_supplicant/c-base-crew.conf with this content (change $crewname and $password to your crew name and password):

  network={
    ssid="c-base-crew"
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="$crewname"
    password="$password"
    ca_cert="<Add the path to the current Let's Encrypt root CA here>"
    subject_match="/CN=radius.cbrp3.c-base.org"
    phase2="auth=MSCHAPV2"
}

And start it with:

  wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf

Debugging

  wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf -ddd

Zertifikate Testen

Die Zeilen ca_cert und subject_match entfernen oder auskommentieren und das ganze noch einmal probieren. Sollte die Verbindung dann klappen bitte noch einmal prüfen ob man das richtige CaCert Zertifikat heruntergeladen hat. Falls ja an uk@c-base.org melden.