...
Code Block | ||
---|---|---|
| ||
network={ phase1="tls_disable_tlsv1_0=1 tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=0 tls_disable_tlsv1_3=1 peapver=0" key_mgmt=WPA-EAP eap=PEAP identity="<username@realm>" anonymous_identity="@realm" password="<userpassword>" phase2="eapauth=MSCHAPV2 mschapv2_retry=0" # ca_cert="<full path of the CA root certificate>" # subject_match="<subject CN>" # altsubject_match="<DNS: entry from subjectAltName>" # domain_match="<subject CN>" } |
To use server certificate validation, uncomment the ca_cert
line.
...