Arch Linux

loqs

Member

Registered: 2014-03-06

Posts: 18,383

Re: [SOLVED] iwd, eduroam, bad_certificate error

linux-6.8.1.arch1 built with https://lore.kernel.org/linux-crypto/20 … ernel.org/ as located by progandy applied and pkgrel incremented to 1.1:
https://drive.google.com/file/d/1Yvd1Bm … sp=sharing linux-6.8.1.arch1-1.1-x86_64.pkg.tar.zst
https://drive.google.com/file/d/1GHnsEQ … sp=sharing linux-headers-6.8.1.arch1-1.1-x86_64.pkg.tar.zst
Edit:
Commit has been added to crypto tree https://git.kernel.org/pub/scm/linux/ke … 3bb121abd4
Edit2:
Queued for 6.8.3.

Last edited by loqs (2024-03-28 01:39:25)

rimeno

Member

Registered: 2024-01-17

Posts: 14

Re: [SOLVED] iwd, eduroam, bad_certificate error

Confirmed ! 6.8.3 works well with Eduroam.

rochus

Member

Registered: 2007-02-14

Posts: 93

Re: [SOLVED] iwd, eduroam, bad_certificate error

confirmed as well. I'll set this thread as SOLVED.

c0manch3

Member

Registered: 2025-03-14

Posts: 1

Re: [SOLVED] iwd, eduroam, bad_certificate error

I can confirm that this is worth a try:

You could use NetworkManager to configure your network connections. In contrast to iwd, it does not rely on the kernel's crypto stack and therefore is not affected by the kernel having SHA1 removed.

Installing NetworkManager with wpa_supplicant worked for me with.

rochus

Member

Registered: 2007-02-14

Posts: 93

Re: [SOLVED] iwd, eduroam, bad_certificate error

Mmh while this was solved, I'm hit by something that looks very similar. On kernel side, the code in crypto/asymmetric_keys didn't change, so I'm a bit surprised. It likely is the local eduroam setup here, but in case I have time I'll investigate some more and report back here (or upstream).

EDIT: all clear on kernel side, the local CA certificate actually changed.

Last edited by rochus (2025-03-14 14:58:18)