2019-12-27 11:41:11 +01:00
|
|
|
{ pkgs, ... }:
|
|
|
|
|
# https://paste.sr.ht/~erictapen/11716989e489b600f237041b6d657fdf0ee17b34
|
|
|
|
|
let
|
|
|
|
|
certificate = pkgs.stdenv.mkDerivation rec {
|
|
|
|
|
name = "dst-root-ca-x3.pem";
|
2019-12-27 21:59:49 +01:00
|
|
|
src = builtins.toFile "${name}.sed" ''
|
|
|
|
|
1,/DST Root CA X3/d
|
|
|
|
|
1,/-----END CERTIFICATE-----/p
|
2019-12-27 11:41:11 +01:00
|
|
|
'';
|
2019-12-27 21:59:49 +01:00
|
|
|
nativeBuildInputs = with pkgs; [ cacert gnused ];
|
2019-12-27 11:41:11 +01:00
|
|
|
phases = "installPhase";
|
|
|
|
|
installPhase = ''
|
2019-12-27 23:43:29 +01:00
|
|
|
${pkgs.gnused}/bin/sed -n -f $src ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt > $out
|
2019-12-27 11:41:11 +01:00
|
|
|
'';
|
|
|
|
|
};
|
2020-06-10 17:37:25 +02:00
|
|
|
in {
|
2019-12-27 11:41:11 +01:00
|
|
|
networking.wireless.networks."36C3" = {
|
|
|
|
|
auth = ''
|
|
|
|
|
key_mgmt=WPA-EAP
|
|
|
|
|
eap=TTLS
|
|
|
|
|
identity="kmein"
|
|
|
|
|
password=" "
|
|
|
|
|
ca_cert="${certificate}"
|
|
|
|
|
altsubject_match="DNS:radius.c3noc.net"
|
|
|
|
|
phase2="auth=PAP"
|
|
|
|
|
'';
|
|
|
|
|
};
|
|
|
|
|
}
|
