[arch-general] Eduroam madness with iwd

[Riccardo Paolo Bestetti]

Hi!

I'm trying to configure iwd to connect to Eduroam. My home istitution requires EAP-TTLS authentication with PAP Phase 2.

I have the following configuration file:

[Security]
EAP-Method=TTLS
EAP-TTLS-CACert=/home/random/.cat_installer/ca.pem
EAP-TTLS-ServerDomainMask=*.unipmn.it
EAP-TTLS-Phase2-Method=Tunneled-PAP
EAP-TTLS-Phase2-Identity=theUser
EAP-TTLS-Phase2-Password=thePassword

[Settings]
AutoConnect=true

When I try to connect with iwd started as a systemd unit, I get the following error in iwctl:
Not configured.
And the following error in the system journal:
failed to load /home/random/.cat_installer/ca.pem
(the certificate is valid and is in the required PEM format - I checked it with the openssl command and it also works with different network daemons)

When I try to connect with iwd started manually with /usr/lib/iwd/iwd -d, I get the following error instead:
Operation failed.
And idw outputs:
4-Way handshake failed for ifindex: 3, reason: 23.

I ran out of debugging ideas! Can anyone help?

- Riccardo