Connecting to WPI WPA2 Wireless using NetCTL on Arch LInux

eduroam

Description='School Wifi'
Interface=wls1
Connection=wireless
Security=wpa-configsection
IP=dhcp
ESSID="WPI-Wireless"
WPAConfigSection=(
'ssid="WPI-Wireless"'
'scan_ssid=1'
'proto=WPA RSN'
'key_mgmt=WPA-EAP'
'eap=TLS'
'group=CCMP TKIP' 
'pairwise=CCMP TKIP'
'identity=“WPI_USERNAME@wpi.edu"'
'ca_cert="/usr/share/wpiwificerts/CA-3905B39901F24AD1293BEE10EC9A67703B61834E.pem"'
'client_cert="/usr/share/wpiwificerts/cert.pem"'
'private_key="/usr/share/wpiwificerts/key.pem"'
'private_key_passwd=“WPI_PASSWORD”’
)

WPI Wireless on Arch Linux

Connecting to WPI network with wpa_supplicant or wicd (or other)
Download client both certificates (CA and the .p12 from WPI-Wireless-setup) Make sure to download the CA cert in pem format. It may work in the default format, but I can not confirm that.

Make sure to save both certs and everything created in this tutorial in a useful directory, such as /usr/share/wpiwificerts

All commands should be run in that same directory, some commands may need to be run as root

Create client certificate
  openssl pkcs12 -in certificate.p12 -out cert.pem -clcerts -nokeys
        (enter @wpi.edu) password when prompted

Create client key
     openssl pkcs12 -in certificate.p12 -out key.pem -nocerts
  (enter @wpi.edu) password when prompted
    set passphrase (may need to be the same as the @wpi.edu password
    
    
Copy the attached eduroam file to /etc/netctl and modify the username and password fields to be your current school password.