Connecting Raspberry Pi to Eduroam (Unicamp)

Eduroam wireless networks are a worldwide partnership between universities where you can login in wireless using your home university credentials. Not always is a easy task to connect in these networks, because they use a not so common encryption scheme. This guide is to connect to Eduroam network using Raspbian "Pixel" in University of Campinas (Brazil).

First you need certificate do autenticate connection, so create the file /home/pi/ca.pem:

With de following command:

echo "-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
MIIDXzCCAkegAwIBAgILBAAAAAABIVhTCKIwDQYJKoZIhvcNAQELBQAwTDEgMB4G
A1UECxMXR2xvYmFsU2lnbiBSb290IENBIC0gUjMxEzARBgNVBAoTCkdsb2JhbFNp
Z24xEzARBgNVBAMTCkdsb2JhbFNpZ24wHhcNMDkwMzE4MTAwMDAwWhcNMjkwMzE4
MTAwMDAwWjBMMSAwHgYDVQQLExdHbG9iYWxTaWduIFJvb3QgQ0EgLSBSMzETMBEG
A1UEChMKR2xvYmFsU2lnbjETMBEGA1UEAxMKR2xvYmFsU2lnbjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAMwldpB5BngiFvXAg7aEyiie/QV2EcWtiHL8
RgJDx7KKnQRfJMsuS+FggkbhUqsMgUdwbN1k0ev1LKMPgj0MK66X17YUhhB5uzsT
gHeMCOFJ0mpiLx9e+pZo34knlTifBtc+ycsmWQ1z3rDI6SYOgxXG71uL0gRgykmm
KPZpO/bLyCiR5Z2KYVc3rHQU3HTgOu5yLy6c+9C7v/U9AOEGM+iCK65TpjoWc4zd
QQ4gOsC0p6Hpsk+QLjJg6VfLuQSSaGjlOCZgdbKfd/+RFO+uIEn8rUAVSNECMWEZ
XriX7613t2Saer9fwRPvm2L7DWzgVGkWqQPabumDk3F2xmmFghcCAwEAAaNCMEAw
DgYDVR0PAQH/BAQDAgEGMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFI/wS3+o
LkUkrk1Q+mOai97i3Ru8MA0GCSqGSIb3DQEBCwUAA4IBAQBLQNvAUKr+yAzv95ZU
RUm7lgAJQayzE4aGKAczymvmdLm6AC2upArT9fHxD4q/c2dKg8dEe3jgr25sbwMp
jjM5RcOO5LlXbKr8EpbsU8Yt5CRsuZRj+9xTaGdWPoO4zzUhw8lo/s7awlOqzJCK
6fBdRoyV3XpYKBovHd7NADdBj+1EbddTKJd+82cEHhXXipa0095MJ6RMG3NzdvQX
mcIfeg7jLQitChws/zyrVQ4PkX4268NXSb7hLi18YIvDQVETI53O9zJrlAGomecs
Mx86OyXShkDOOyyGeMlhLxS67ttVb9+E7gUJTb0o2HLO02JQZR7rkpeDMdmztcpH
WD9f
-----END CERTIFICATE-----
" > $HOME/ca.pem

Now we must add Eduroam network to /etc/wpa_supplicant/wpa_supplicant.conf:

network={
  ssid="eduroam"
  key_mgmt=WPA-EAP
  pairwise=CCMP
  group=CCMP TKIP
  eap=TTLS
  ca_cert="/home/pi/ca.pem"
  identity="your_RA@unicamp.br"
  subject_match="unicamp.br"
  phase2="auth=PAP"
  password="your_passkey"
  anonymous_identity="anonymous@unicamp.br"
}