#acl All:read
=== Wireless Eduroam Linux Debian (sid) wpasupplicant ===

==== Ha az NIIF Root CA-t használjuk ====
cd /etc/ssl/certs/
wget http://www.ca.niif.hu/Certificates/niif_ca_root_x509.pem
ln -sf niif_ca_root_x509.pem  `openssl x509 -hash -noout -in niif_ca_root_x509.pem`.0
}}}

==== Ha más root CA-t ====
hasonlóan nyerjük ki a root CA publikus kulcsát


==== WPA supplicant konfiguráció ====

Addjuk hozzá az /etc/network/interfaces file-hoz a következőt, úgy hogy az eth2 inteface-t helyetesítsük a megfelelő wireless ethernet eszközzel.

/etc/network/interfaces
{{{
allow-hotplug eth2
iface eth2 inet manual
        wpa-driver wext
	wpa-roam /etc/wpa_supplicant/wpa_supplicant.conf

# id_str="eduroam"
iface eduroam inet dhcp
}}}

/etc/wpa_supplicant/wpa_supplicant.conf
{{{
# Minimal /etc/wpa_supplicant.conf to associate with open
#  access points. Please see
#  /usr/share/doc/wpasupplicant/examples/README.wpa_supplicant.conf.gz
#  for more complete configuration parameters.
#
# Also see the other files in /usr/share/doc/wpasupplicant/examples/ for
#  specific configuration examples.

# path to UNIX socket control interface
ctrl_interface=/var/run/wpa_supplicant

#ap_scan=1
#fast_reauth=1
#WEP104 WEP40
network={
	ssid="eduroam"
    	id_str="eduroam"
	eap=TTLS
	identity="misi@niif.hu"
	anonymous_identity="anonymous@niif.hu"
	ca_cert="/etc/ssl/certs/GTE_CyberTrust_Global_Root.pem"
	phase2="auth=PAP"
	group=CCMP TKIP
	pairwise=CCMP TKIP
	key_mgmt=WPA-EAP
	password="jelszó"
        subject_match="/C=HU/O=NIIF CA/OU=NIIFI/CN=radius.ki.niif.hu"
}
}}}



Ha  nem adjuk meg a jelszót a konfig
fájlban, akkor az ifup eth2 után a wpa_cli bekéri tőlünk:
{{{
# ifup eth2
# wpa_cli
wpa_cli v0.5.5
Copyright (c) 2004-2006, Jouni Malinen <jkmaline@cc.hut.fi> and contributors

This program is free software. You can distribute it and/or modify it
under the terms of the GNU General Public License version 2.

Alternatively, this software may be distributed under the terms of the
BSD license. See README and COPYING for more details.


Selected interface 'eth2'

Interactive mode

<2>CTRL-REQ-PASSWORD-0:Password needed for SSID eduroam
> password 0 jelszó
OK
> <2>CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully
<2>WPA: Key negotiation completed with 00:19:a9:a7:28:51 [PTK=CCMP GTK=TKIP]
<2>CTRL-EVENT-CONNECTED - Connection to 00:19:a9:a7:28:51 completed (auth) [id=0 id_str=eduroam]
quit
}}}

A {{{password}}} a parancs, a {{{0}}} a CTRL-REQ-PASSWORD- és a kettőspont közül
jött, a jelszó a jelszó.  Közben esetleg dzsuvázik a wpa_cli a saját
promptjába, ez ne zavarjon bennünket.