EAP-TLS (OLD) - Revision history

Pew: Paul moved page EAP-TLS to EAP-TLS (OLD) without leaving a redirect

2019-01-04T02:29:42Z

Paul moved page EAP-TLS to EAP-TLS (OLD) without leaving a redirect

Pew at 22:31, 3 January 2019

2019-01-03T22:31:11Z

Pew at 20:06, 3 January 2019

2019-01-03T20:06:46Z

imported>Pew at 09:00, 2 January 2018

2018-01-02T09:00:12Z

imported>Ram: Add warning about deprecation

2015-02-02T21:27:38Z

Add warning about deprecation

imported>Mutantmonkey: Remove netcfg instructions

2014-08-17T01:08:12Z

Remove netcfg instructions

imported>Mutantmonkey at 00:59, 17 August 2014

2014-08-17T00:59:18Z

imported>Uncurlhalo: Migrated from Uniluug because StartSSL are shitlords

2014-04-22T17:51:00Z

Migrated from Uniluug because StartSSL are shitlords

Show changes

2001:468:C80:4391:59B6:F94D:75AB:5BA2 at 22:19, 9 September 2013

2013-09-09T22:19:49Z

imported>Mutantmonkey: GlobalSign cert (untested for now)

2011-12-27T19:15:07Z

GlobalSign cert (untested for now)

← Older revision		Revision as of 22:31, 3 January 2019
Line 131:		Line 131:
	* [http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP-TLS EAP-TLS Wikipedia article]		* [http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP-TLS EAP-TLS Wikipedia article]

		+	[[Category:Campus computing resources]]
	[[Category:Howtos]]		[[Category:Howtos]]
		+	[[Category:Deprecated]]

← Older revision		Revision as of 20:06, 3 January 2019
Line 132:		Line 132:

	[[Category:Howtos]]		[[Category:Howtos]]
−	~~[[Category:Pending deletion]]~~

← Older revision		Revision as of 09:00, 2 January 2018
Line 132:		Line 132:

	[[Category:Howtos]]		[[Category:Howtos]]
		+	[[Category:Pending deletion]]

← Older revision		Revision as of 21:27, 2 February 2015
Line 1:		Line 1:
		+	'''Warning:''' Much of the information on this page is outdated and may no longer be a supported configuration. For more information see [[Virginia Tech Wifi]].
		+
	This article describes how to setup '''EAP-TLS''' on various Linux distributions. EAP-TLS is a strong wireless authentication scheme of choice for many large institutions such as universities and corporations and is used by Virginia Tech for connections to [[VT-Wireless]].		This article describes how to setup '''EAP-TLS''' on various Linux distributions. EAP-TLS is a strong wireless authentication scheme of choice for many large institutions such as universities and corporations and is used by Virginia Tech for connections to [[VT-Wireless]].

@@ Line 53: / Line 53: @@
 * Check "Automatically connect to this network"
 * Hit Connect
 ==netctl==

← Older revision	Revision as of 02:29, 4 January 2019
(No difference)

@@ Line 20: / Line 20: @@
 * Select '''WPA & WPA2 Enterprise''' from the 'Security' drop-down menu
 * Choose '''TLS''' as the authentication type from the 'Authentication' drop-down menu
-* Type in your {{{identity|PID}}} in the 'Identity' text box
+* Type in your PID in the 'Identity' text box
 * To get 'User Certificate':
@@ Line 46: / Line 46: @@
 * Check "Use these settings for all networks sharing this essid"
 * Select '''EAP-TLS''' from the dropdown menu.
-* For identity, enter your {{{identity|PID}}}.
+* For identity, enter your PID.
 * For private key, enter the path to your downloaded p12 file.
 * Enter your private key password.
-* For the Path to CA Cert, enter '''{{{ca_cert}}}'''
+* For the Path to CA Cert, enter '''/etc/ssl/certs/GlobalSign_Root_CA.pem'''
 * Hit OK
 * Check "Automatically connect to this network"
@@ Line 57: / Line 57: @@
 Tested on [[Arch Linux]] with netcfg 3.0 (updated on 2013-04-12).
-* Create a file, '''/etc/network.d/{{{ssid}}}''' and place this in it:<br />
+* Create a file, '''/etc/network.d/VT-Wireless''' and place this in it:<br />
   CONNECTION='wireless'
   INTERFACE='wlan0'
   SECURITY='wpa-configsection'
-  ESSID='{{{ssid}}}'
+  ESSID='VT-Wireless'
   IP='dhcp'
   IP6='stateless'
   CONFIGSECTION='
-  	ssid="{{{ssid}}}"
+  	ssid="VT-Wireless"
   	proto=RSN
   	key_mgmt=WPA-EAP
@@ Line 72: / Line 72: @@
   	private_key="PATH TO YOUR PRIVATE KEY"
   	private_key_passwd="YOUR PRIVATE KEY PASSWORD"
-  	ca_cert="{{{ca_cert}}}"
+  	ca_cert="/etc/ssl/certs/GlobalSign_Root_CA.pem"
+  '
-Make sure to change '''identity''' to your {{{identity|PID}}}, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
+Make sure to change '''identity''' to your PID, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
-* After creating this file, make sure to change the owner to root (<code>sudo chown root:root /etc/network.d/{{{ssid}}}</code>) and change the permissions so that it can be read only by the owner (<code>sudo chmod 0600 /etc/network.d/{{{ssid}}}</code>). This will ensure that your private key password cannot be read by others easily.
+* After creating this file, make sure to change the owner to root (<code>sudo chown root:root /etc/network.d/VT-Wireless</code>) and change the permissions so that it can be read only by the owner (<code>sudo chmod 0600 /etc/network.d/VT-Wireless</code>). This will ensure that your private key password cannot be read by others easily.
 * To connect, simply type the following in a terminal:
-  sudo netcfg {{{ssid}}}
+  sudo netcfg VT-Wireless
 ==netctl==
 Tested on [[Arch Linux]] with netctl 0.8 (updated on 2013-04-12).
-* Create a file, '''/etc/netctl/{{{ssid}}}''' and place this in it:
+* Create a file, '''/etc/netctl/VT-Wireless''' and place this in it:
-  Description="{{{ssid}}} EAP-TLS"
+  Description="VT-Wireless EAP-TLS"
   Interface=wlan0
   Connection=wireless
@@ Line 94: / Line 94: @@
   WPAConfigSection=(
-      'ssid="{{{ssid}}}"'
+      'ssid="VT-Wireless"'
       'proto=RSN'
       'key_mgmt=WPA-EAP'
@@ Line 101: / Line 101: @@
       'private_key="PATH TO YOUR PRIVATE KEY"'
       'private_key_passwd="YOUR PRIVATE KEY PASSWORD"'
-      'ca_cert="{{{ca_cert}}}"'
+      'ca_cert="/etc/ssl/certs/GlobalSign_Root_CA.pem"'
+  )
-Make sure to change '''identity''' to your {{{identity|PID}}}, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
+Make sure to change '''identity''' to your PID, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
-* After creating this file, make sure to change the owner to root (<code>sudo chown root:root /etc/netctl/{{{ssid}}}</code>) and change the permissions so that it can be read only by the owner (<code>sudo chmod 0600 /etc/netctl/{{{ssid}}}</code>). This will ensure that your private key password cannot be read by others easily.
+* After creating this file, make sure to change the owner to root (<code>sudo chown root:root /etc/netctl/VT-Wireless</code>) and change the permissions so that it can be read only by the owner (<code>sudo chmod 0600 /etc/netctl/VT-Wireless</code>). This will ensure that your private key password cannot be read by others easily.
 * To connect, simply type the following in a terminal:
-  sudo netctl start {{{ssid}}}
+  sudo netctl start VT-Wireless
 ==wpa_supplicant==
@@ Line 116: / Line 116: @@
 * Place this at the bottom of your '''/etc/wpa_supplicant.conf''':
   network={
-  	ssid="{{{ssid}}}"
+  	ssid="VT-Wireless"
   	proto=RSN
   	key_mgmt=WPA-EAP
@@ Line 123: / Line 123: @@
   	private_key="PATH TO YOUR PRIVATE KEY"
   	private_key_passwd="YOUR PRIVATE KEY PASSWORD"
-  	ca_cert="{{{ca_cert}}}"
+  	ca_cert="/etc/ssl/certs/GlobalSign_Root_CA.pem"
+  }
-Make sure to change '''identity''' to your {{{identity|PID}}}, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
+Make sure to change '''identity''' to your PID, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
 * To connect, simply start wpa_supplicant as you would manually, for example:
@@ Line 148: / Line 148: @@
 * Leave '''CA certificate''' at '''(unspecified)'''.
 * Change '''User certificate''' to the name of the certificate you installed for this network.
-* For '''Identity''', you may leave it blank or enter your {{{identity|PID}}}, depending on network.
+* For '''Identity''', you may leave it blank or enter your PID, depending on network.
 * Leave all other fields blank.

@@ Line 2: / Line 2: @@
 ==Obtain the VT-Wireless Certificate==
-Regardless of what program you use to make your connection, you will need to [https://netcert.cns.vt.edu/netcert/ obtain your p12 certificate and password from CNS], which is needed to establish your connection. Note the certificate password; you can save it permanently if you'd like, but you will only need it during set up.
+Regardless of what program you use to make your connection, you will need to [https://netcert.cns.vt.edu/netcert/ obtain your p12 certificate and password from CNS], which is needed to establish your connection. Note the certificate password; you can save it permanently if you'd like; but you will only need it during set up.
 <!-- The rest of this page uses a template from the Uniluug project; please see https://uniluug.org/wiki/Template:EAP-TLS if you wish to edit it. -->

@@ Line 6: / Line 6: @@
 <!-- The rest of this page uses a template from the Uniluug project; please see https://uniluug.org/wiki/Template:EAP-TLS if you wish to edit it. -->
 <!-- Note that the curl extension must be installed for this to work properly. Also, raw must be used for template variables to work, but this breaks images, so the wiki must be configured to use a shared image repository. -->
-{{raw:u:EAP-TLS|ssid=VT-Wireless|ca_cert=/etc/ssl/certs/Thawte_Premium_Server_CA.pem|identity=PID}}
+{{raw:u:EAP-TLS|ssid=VT-Wireless|ca_cert=/etc/ssl/certs/GlobalSign_Root_CA.pem|identity=PID}}
 [[Category:Howtos]]