Changes

Jump to: navigation, search

EAP-TLS (OLD)

894 bytes removed, 02:29, 4 January 2019
m
Paul moved page EAP-TLS to EAP-TLS (OLD) without leaving a redirect
'''Warning:''' Much of the information on this page is outdated and may no longer be a supported configuration. For more information see [[Virginia Tech Wifi]].
 
This article describes how to setup '''EAP-TLS''' on various Linux distributions. EAP-TLS is a strong wireless authentication scheme of choice for many large institutions such as universities and corporations and is used by Virginia Tech for connections to [[VT-Wireless]].
* Check "Automatically connect to this network"
* Hit Connect
 
==netcfg==
Tested on [[Arch Linux]] with netcfg 3.0 (updated on 2013-04-12).
 
* Create a file, '''/etc/network.d/VT-Wireless''' and place this in it:<br />
CONNECTION='wireless'
INTERFACE='wlan0'
SECURITY='wpa-configsection'
ESSID='VT-Wireless'
IP='dhcp'
IP6='stateless'
CONFIGSECTION='
ssid="VT-Wireless"
proto=RSN
key_mgmt=WPA-EAP
eap=TLS
identity="YOUR IDENTITY"
private_key="PATH TO YOUR PRIVATE KEY"
private_key_passwd="YOUR PRIVATE KEY PASSWORD"
ca_cert="/etc/ssl/certs/GlobalSign_Root_CA.pem"
'
Make sure to change '''identity''' to your PID, '''private_key''' to the path to your downloaded p12 file, and '''private_key_passwd''' to the password for your private key.
 
* After creating this file, make sure to change the owner to root (<code>sudo chown root:root /etc/network.d/VT-Wireless</code>) and change the permissions so that it can be read only by the owner (<code>sudo chmod 0600 /etc/network.d/VT-Wireless</code>). This will ensure that your private key password cannot be read by others easily.
 
* To connect, simply type the following in a terminal:
sudo netcfg VT-Wireless
==netctl==
* [http://en.wikipedia.org/wiki/Extensible_Authentication_Protocol#EAP-TLS EAP-TLS Wikipedia article]
[[Category:Campus computing resources]]
[[Category:Howtos]]
[[Category:Deprecated]]

Navigation menu