Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Code Block
languagetext
network={
  phase1="tls_disable_tlsv1_0=1 tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=0 tls_disable_tlsv1_3=1 peapver=0"
  key_mgmt=WPA-EAP
  eap=PEAP
  identity="<username@realm>"
  anonymous_identity="@realm"
  password="<userpassword>"
  phase2="eapauth=MSCHAPV2 mschapv2_retry=0"
#  ca_cert="<full path of the CA root certificate>"
#  subject_match="<subject CN>"
#  altsubject_match="<DNS: entry from subjectAltName>"
#  domain_match="<subject CN>"
}

To use server certificate validation, uncomment the ca_cert line.

...