Network/802.1X client settings - Revision history

AK47: oops, fix c3noc.net --> emf.camp

2016-07-24T13:44:40Z

oops, fix c3noc.net --> emf.camp

← Older revision		Revision as of 13:44, 24 July 2016
Line 7:		Line 7:
	If that affects you, it may be easiest to use wpa_supplicant.		If that affects you, it may be easiest to use wpa_supplicant.

	'''/etc/NetworkManager/system-connections/~~32C3~~''':		'''/etc/NetworkManager/system-connections/emfcamp''':

	[connection]		[connection]
Line 31:		Line 31:

	[802-1x]		[802-1x]
	altsubject-matches=DNS:radius.~~c3noc~~.~~net~~		altsubject-matches=DNS:radius.emf.camp
	ca-cert=/etc/ssl/certs/StartCom_Certification_Authority.pem		ca-cert=/etc/ssl/certs/StartCom_Certification_Authority.pem
	eap=ttls;		eap=ttls;
Line 66:		Line 66:
	eap=TTLS		eap=TTLS
	ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"		ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"
	altsubject_match="DNS:radius.~~c3noc~~.~~net~~"		altsubject_match="DNS:radius.emf.camp"
	anonymous_identity="$_ANONYMOUS_IDENTITY"		anonymous_identity="$_ANONYMOUS_IDENTITY"
	phase2="auth=PAP"		phase2="auth=PAP"
Line 96:		Line 96:
	# ca path on debian 7.x, modify accordingly		# ca path on debian 7.x, modify accordingly
	ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"		ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"
	altsubject_match="DNS:radius.~~c3noc~~.~~net~~"		altsubject_match="DNS:radius.emf.camp"
	phase2="auth=PAP"		phase2="auth=PAP"
	}		}
Line 114:		Line 114:
	wpa-phase2 "auth=PAP"		wpa-phase2 "auth=PAP"
	wpa-ca_cert "/etc/ssl/certs/StartCom_Certification_Authority.pem"		wpa-ca_cert "/etc/ssl/certs/StartCom_Certification_Authority.pem"
	wpa-altsubject_match DNS:radius.~~c3noc~~.~~net~~		wpa-altsubject_match DNS:radius.emf.camp

	== netctl ==		== netctl ==
Line 131:		Line 131:
	'password="snowden"'		'password="snowden"'
	'ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"'		'ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"'
	'altsubject_match="DNS:radius.~~c3noc~~.~~net~~"'		'altsubject_match="DNS:radius.emf.camp"'
	'phase2="auth=PAP"'		'phase2="auth=PAP"'
	)		)

AK47: /* Windows */

2016-07-21T07:36:01Z

Windows

← Older revision		Revision as of 07:36, 21 July 2016
Line 144:		Line 144:
	Import one of these profiles for the correct WiFi-settings for Windows		Import one of these profiles for the correct WiFi-settings for Windows

	~~TODO~~		* [[http://koopen.net/emf/emfcamp.xml emfcamp]] (5GHz only)
	~~<!--~~* [[~~https~~://~~c3noc~~.net/~~32c3~~/emfcamp.xml emfcamp]] (5GHz only)		* [[http://koopen.net/emf/emfcamp-legacy.xml emfcamp-legacy)]] (2.4GHz only)
	* [[~~https~~://~~c3noc~~.net/~~32c3~~/emfcamp-legacy.xml emfcamp-legacy)]] (2.4GHz only)~~!-->~~

	To import and connect follow these steps:		To import and connect follow these steps:

	# Open a command prompt and execute: netsh wlan add profile filename=emfcamp.xml		# Open a command prompt and execute (or emfcamp-legacy.xml): netsh wlan add profile filename=emfcamp.xml
	# Connect to the emfcamp or emfcamp-legacy network; use "emfcamp/emfcamp" as the username/password when prompted.		# Connect to the emfcamp or emfcamp-legacy network; use "emfcamp/emfcamp" as the username/password when prompted.

AK47: /* Apple MacOS / iOS */

2016-07-21T07:34:24Z

Apple MacOS / iOS

← Older revision		Revision as of 07:34, 21 July 2016
Line 138:		Line 138:
	You can use one of these profiles for the correct WiFi-settings for Apple MacOS / iOS:		You can use one of these profiles for the correct WiFi-settings for Apple MacOS / iOS:

	~~TODO~~		* [[http://koopen.net/emf/emfcamp.mobileconfig emfcamp]] (5GHz only)
	~~<!--~~* [[~~https~~://~~c3noc~~.net/~~32c3~~/~~32c3~~.mobileconfig emfcamp]] (5GHz only)		* [[http://koopen.net/emf/emfcamp-legacy.mobileconfig emfcamp-legacy]] (2.4GHz only)
	* [[~~https~~://~~c3noc~~.net/~~32c3~~/~~32c3~~-legacy.mobileconfig emfcamp-legacy]] (2.4GHz only)~~!-->~~

	== Windows ==		== Windows ==

AK47: Created page with "== Network Manager == You can use the following config file: Please note that some versions of NM are buggy and will only work with 802.1X using MSCHAPv2, or not at all. If..."

2016-07-21T06:06:36Z

Created page with "== Network Manager == You can use the following config file: Please note that some versions of NM are buggy and will only work with 802.1X using MSCHAPv2, or not at all. If..."

New page

== Network Manager ==

You can use the following config file:

Please note that some versions of NM are buggy and will only work with
802.1X using MSCHAPv2, or not at all.
If that affects you, it may be easiest to use wpa_supplicant.

'''/etc/NetworkManager/system-connections/32C3''':

[connection]
id=emfcamp
uuid=c80101e2-7b99-4511-846b-2388eb86a5ad
type=wifi
permissions=
secondaries=

[wifi]
mac-address=42:23:42:23:42:23 <- !! Please change this !!
mac-address-blacklist=
mode=infrastructure
seen-bssids=
ssid=emfcamp

[wifi-security]
auth-alg=open
group=
key-mgmt=wpa-eap
pairwise=
proto=

[802-1x]
altsubject-matches=DNS:radius.c3noc.net
ca-cert=/etc/ssl/certs/StartCom_Certification_Authority.pem
eap=ttls;
identity=emfcamp
password=emfcamp
phase2-altsubject-matches=
phase2-auth=pap

[ipv4]
dns-search=
method=auto

[ipv6]
dns-search=
method=auto

== WICD ==
You need an additional crypto setting for WiCD. Put this file into '''/etc/wicd/encryption/templates/eap-ttls''' (debian systems, might be different with other *nix flavours):

name = EAP-TTLS emfcamp
author = Felicitus
require identity *Identity password *password
-----
ctrl_interface=/var/run/wpa_supplicant
network={
ssid="emfcamp"
scan_ssid=$_SCAN
identity="edward"
password="snowden"
proto=WPA2
key_mgmt=WPA-EAP
group=CCMP
pairwise=CCMP
eap=TTLS
ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"
altsubject_match="DNS:radius.c3noc.net"
anonymous_identity="$_ANONYMOUS_IDENTITY"
phase2="auth=PAP"
#priority=2
}

Edit '''/etc/wicd/encryption/templates/active''' to include the '''eap-ttls''' config template. Restart the WiCD daemon, choose the proper encryption (EAP-TTLS emfcamp) and enter a random username/password.

== Jolla/connman ==
/var/lib/connman/emfcampwifi.config :

[service_emfcamp]
Type=wifi
Name=emfcamp-legacy
EAP=ttls
Phase2=PAP
Identity=edward
Passphrase=snowden

== wpa_supplicant.conf ==
/etc/wpa_supplicant/wpa_supplicant.conf :

network={
ssid="emfcamp"
key_mgmt=WPA-EAP
eap=TTLS
identity="edward"
password="snowden"
# ca path on debian 7.x, modify accordingly
ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"
altsubject_match="DNS:radius.c3noc.net"
phase2="auth=PAP"
}

== interfaces ==
As an alternative, you can specify the wpa_supplicant config options directly in /etc/network/interfaces:

iface wlan0 inet dhcp
wpa-ssid emfcamp
wpa-identity edward
wpa-password snowden
wpa-proto WPA2
wpa-key_mgmt WPA-EAP
wpa-group CCMP
wpa-pairwise CCMP
wpa-eap TTLS
wpa-phase2 "auth=PAP"
wpa-ca_cert "/etc/ssl/certs/StartCom_Certification_Authority.pem"
wpa-altsubject_match DNS:radius.c3noc.net

== netctl ==
Description='emfcamp secure WPA2 802.1X config'
Interface=wls1
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID=emfcamp
WPAConfigSection=(
'ssid="emfcamp"'
'proto=RSN WPA'
'key_mgmt=WPA-EAP'
'eap=TTLS'
'identity="edward"'
'password="snowden"'
'ca_cert="/etc/ssl/certs/StartCom_Certification_Authority.pem"'
'altsubject_match="DNS:radius.c3noc.net"'
'phase2="auth=PAP"'
)

== Apple MacOS / iOS ==
You can use one of these profiles for the correct WiFi-settings for Apple MacOS / iOS:

TODO


== Windows ==
Import one of these profiles for the correct WiFi-settings for Windows

TODO


To import and connect follow these steps:

# Open a command prompt and execute: netsh wlan add profile filename=emfcamp.xml
# Connect to the emfcamp or emfcamp-legacy network; use "emfcamp/emfcamp" as the username/password when prompted.