[How-To] WPA-802.1X (enterprise), eduroam +[Others] GUI wifi support needed + workaround [released]
asked 2013-12-24 17:43:42 +0300
Jolla needs to add support of using WPA-802.1X for the wifi connections, as a lot of routers + workspaces + universities use it.
So the WPA Supplicant does work now but there is no GUI implementation of adding additional networks, you will need to use a workaround described below. To make things easier try to use SSH connection from your PC to Jolla, that should make it easier than typing it out on screen keyboard.
Currently there is an unofficial workaround which people can use.
a) activate developer-mode (Settings->System->DeveloperMode)
b) use the terminal on the device or ssh to the device
c) install vim or any other text editor
d) vim /home/.system/var/lib/connman/wifi_eduroam.config (it has changed from 3.1)
wifi_eduroam.config: please note that entries seem to be case sensitive
[service_eduroam]
Type=wifi
Name=eduroam
EAP=peap
CACertFile=/etc/ssl/certs/ca-bundle.crt
Phase2=MSCHAPV2
Identity=user@domain
Passphrase=yoursecret
e) save and exit
f) turn on/off wlan (or reboot phone)
Please feel free to contribute :)
if you want to install vim or nano please use the commands in terminal
nano:
pkcon install nano
vim:
pkcon install zypper
zypper in vim
[update]: nodevel has released a sailfish application which allows to create such networks, Feel free to have a loop at [Roamer](https://openrepos.net/content/nodevel/roamer)
As an example here is my eduroam login for University connection
[service_eduroam]
Type=wifi
Name=eduroam
EAP=peap
Phase1=0
Phase2=MSCHAPV2
Identity=********@glam.ac.uk
Passphrase=********
There was no need to specify the certificate
ChemIst's Eduroam Config for uni-kl.de please note that entries seem to be case sensitive
[service_eduroam]
Type=wifi
Name=eduroam
EAP=ttls
CACertFile=/etc/ssl/certs/ca-bundle.crt
Phase2=PAP
Identity=********@rhrk.uni-kl.de
Passphrase=********
The title is misleading. You're asking for WPA Enterprise, specifically an EAP variety of it. This is not PSK.
tbr ( 2013-12-24 20:00:32 +0300 )editDoesn't eduroam use TTLS, PAP, and also needs an anonymous identity? It does at the Heinrich-Heine-University in Düsseldorf at least ;)
Kondou ( 2013-12-24 22:06:49 +0300 )editeduroam uses quite a variety of EAP methods depending on the home organisation. Some use PEAP, some EAP-TTLS+PAP, some EAP-TTLS+MSCHAPv2, some EAP-TLS, some EAP-PWD. This means that either Jolla should have UI for configuring various wpa_supplicant parameters or way to provision config and certs.
Karri Huhtanen ( 2013-12-27 10:32:23 +0300 )editWorks great, just connected a wpa2 enterprise network....
BoertjE ( 2013-12-30 11:41:10 +0300 )editHad a little trouble with Helsinki University Eduroam myself, but got this to work after I realized connman really does require the domain part in the username (as opposed to wpa_supplicant that I normally use). Their CA Cert can be downloaded here: https://www.helsinki.fi/atk/ca/HYAD_ROOT_CA.pem
elakim ( 2014-01-02 18:11:25 +0300 )edit