ICT: Diary
D: 28 W: 05

< June 2024 >
Sun Mon Tue Wed Thu Fri Sat
 1
2345678
9101112131415
16171819202122
23242526272829
30 

Based on notaweblog.php by joshua stein

[ ] Tuesday, 18 June 2024 [ ]

LT Support Hub

18:45 Peasano's

pygmentize

Using pygmentize -L | grep -i unix to find the Lexer name for:

pygmentize -f html -l shell -o out.html in.sh

Check PEM Certificates

openssl x509 -in ca.pem -text -noout

Eduroam on OpenBSD

Using the CAT from cat.eduroam.org allows the download of a python application for generating a wpa_supplicant.conf file and the necessary ca.pem certificate files.

The CAT python script gave me the information I need to build my wpa_supplicant.conf:

# wpa_supplicant configuration file for OpenBSD

ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=wheel

eapol_version=1

# wireless network:
network={
        ssid="eduroam"
	scan_ssid=1
	key_mgmt=WPA-EAP
	pairwise=CCMP
	group=CCMP TKIP
        eap=PEAP
	ca_cert="/etc/ssl/eduroam.pem"
        identity="user.name@uni.ac.uk"
	altsubject_match="DNS:radius.uni.ac.uk"
        anonymous_identity="anonymous@uni.ac.uk"
        password="SuperSecurePassword"
	phase2="auth=MSCHAPV2"
}

The following shell script now connects me to eduroam:

#! /bin/sh -x
# Set Up Laptop for with Eduroam at 
# University of Glasgow
IF="iwm0"
# clear interface
doas /sbin/ifconfig $IF -inet down
# remove stale wpa_supplicant files
if [ -a "/var/run/wpa_supplicant/$IF" ]; then 
    echo "found socket removing:"
    doas rm /var/run/wpa_supplicant/$IF
fi
# setup wireless interface
doas /sbin/ifconfig $IF -wpakey 
doas /sbin/ifconfig $IF nwid eduroam wpa wpaakms 802.1x up 
# start wpa supplicant
doas /usr/local/sbin/wpa_supplicant -dd -Bc /etc/wpa_supplicant.conf -D openbsd -i $IF 
# sleep
sleep 5
# get an ip address
doas /usr/sbin/dhcpleasectl $IF
pygmentsslOpenBSDeduroam

$Id: diary,v 1.38 2025/01/01 22:43:54 fred Exp $