X-Git-Url: https://git.martlubbers.net/?a=blobdiff_plain;f=nonm.html;h=1b0bfcc61b89559170948a8f354628bd00b8ebc4;hb=1e3e2841384dedcf4ffa680f0f942ce063addcff;hp=5baa4737dcba5c4d40842f70f5bd3bb829571395;hpb=83d673a1753c80c93dbe3f40dc78505260a6b921;p=martlubbers.net.git

diff --git a/nonm.html b/nonm.html
index 5baa473..1b0bfcc 100644
--- a/nonm.html
+++ b/nonm.html
@@ -79,5 +79,44 @@ update_config=1
 		Note that it resides by default in <tt>/usr/sbin</tt>.
 		<tt>wpa_gui</tt> is a graphical frontend where you can add, remove, diagnose and change wireless networks with <em>almost</em> as much functionality as <tt>wpa_cli</tt>.
 		</p>
+
+		<h2><tt>eduroam</tt></h2>
+		<p>
+		Eduroam gives a nice configuration assistant tools nowadays that will generate a <tt>wpa_supplicant.conf</tt> entry for you.
+		Previously you could hash your password using md4 but I haven't tested whether this still works.
+		</p>
+
+		<h3>update: cat broken</h3>
+		The tool worked before&trade; but not anymore on my debian testing version.
+		Therefore I've pasted my config here for later reference.
+		You get the <tt>ca_cert</tt> from the assistant tool.
+		I might upload that here as well.
+		<pre>
+network={
+	ssid="eduroam"
+	proto=RSN
+	key_mgmt=WPA-EAP
+	pairwise=CCMP
+	auth_alg=OPEN
+	eap=PEAP
+	identity="YOURUSERNAME@ru.nl"
+	anonymous_identity="anonymous@ru.nl"
+	password="YOURPASSWORD"
+#	ca_cert="/home/frobnicator/.cat_installer/ca.pem"
+	domain_suffix_match="authenticatie.ru.nl"
+	phase2="auth=MSCHAPV2"
+}
+		</pre>
+		</p>
+
+		<h2><tt>openssl update</tt></h2>
+		<p>
+		The new version of openssl disables everything lower than TLSv1.2.
+		If you see errors in <tt>/var/log/syslog</tt> about <tt>TLS</tt> you have to allow lower version TLS versions by changing the last two lines in <tt>/etc/ssl/openssl.cnf</tt> to:
+		<pre>
+MinProtocol = TLSv1.0
+CipherString = DEFAULT@SECLEVEL=1
+		</pre>
+		</p>
 	</body>
 </html>