Differences

This shows you the differences between two versions of the page.

--- c-services:wlan-c-base-crew-wpasupplicant [2014/11/10 23:52] – created xen
+++ c-services:wlan-c-base-crew-wpasupplicant [2021/11/23 19:39] (current) – uk
@@ Line 1: / Line 1: @@
-Create a file **/etc/wpa_supplicant/c-base-crew.conf** with this content (change $crewname and $password to your crew name and password):
+:!: Since 2021 the c-base crew wifi uses a certificate issued by `Let's Encrypt`
+<del>Zertifikat runterladen</del>
+<code bash>
+# This is not necessary anymore!
+curl -Ss https://wiki.c-base.org/dokuwiki/_media/c-services:radius.cbrp3.c-base.org.pem > /etc/ssl/certs/radius.cbrp3.c-base.org.pem
+</code>
+Create a file **/etc/wpa_supplicant/c-base-crew.conf** with this content (change $crewname and $password to your crew name and password):
+<code>
   network={
-      ssid="c-base-crew"
+    ssid="c-base-crew"
-      key_mgmt=WPA-EAP
+    key_mgmt=WPA-EAP
-      eap=PEAP
+    eap=PEAP
-      identity="$crewname"
+    identity="$crewname"
-      password="$password"
+    password="$password"
-      ca_cert="/etc/ssl/certs/cacert.org.pem"
+    ca_cert="<Add the path to the current Let's Encrypt root CA here>"
-      subject_match="C=DE, ST=Berlin, L=Berlin, O=c-base e.V., CN=wlan.cbrp3.c-base.org"
+    subject_match="/CN=radius.cbrp3.c-base.org"
-  }
+    phase2="auth=MSCHAPV2"
+}
+</code>
 And start it with:
+<code bash>
   wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf
+</code>
+===== Debugging =====
+<code bash>
+  wpa_supplicant -D wext -i wlan0 -c /etc/wpa_supplicant/c-base-crew.conf -ddd
+</code>
+==== Zertifikate Testen ====
+Die Zeilen **ca_cert** und **subject_match** entfernen oder auskommentieren und das ganze noch einmal probieren. Sollte die Verbindung dann klappen bitte noch einmal prüfen ob man das richtige CaCert Zertifikat heruntergeladen hat. Falls ja an <uk@c-base.org> melden.

User Tools

Site Tools

Differences

Page Tools