Details: https://www.lrz.de/services/netz/mobil/802_1x/802_1x-linux-ubuntu/ Failure due to domain suffix match wrong ========================================== ---> 19:34:55 pathfinder2 NetworkManager[8965]: [1462296895.5187] Config: added 'domain_suffix_match' value 'xxx.yy.at' 19:34:55 pathfinder2 NetworkManager[8965]: [1462296895.5187] Config: added 'bgscan' value 'simple:30:-65:300' 19:34:55 pathfinder2 NetworkManager[8965]: [1462296895.5187] Config: added 'proactive_key_caching' value '1' [...] 19:34:55 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-STARTED EAP authentication started 19:34:55 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 19:34:55 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected 19:34:56 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA' hash=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 19:34:56 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA SSL CA 3' hash=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ---> 19:34:56 pathfinder2 wpa_supplicant[1193]: TLS: Domain suffix match 'xxx.yy.at' not found ---> 19:34:56 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=9 depth=0 subject='/C=AT/ST=Vienna/L=Wien/O=Universit\xC3\xA4t Wien/OU=Zentraler Informatikdienst/CN=radius1.univie.ac.at' err='Domain suffix mismatch' ---> 19:34:56 pathfinder2 wpa_supplicant[1193]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:certificate unknown ---> 19:34:56 pathfinder2 wpa_supplicant[1193]: OpenSSL: openssl_handshake - SSL_connect error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed ---> 19:34:57 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-FAILURE EAP authentication failed Success with correct domain suffix match ========================================= ---> 19:35:24 pathfinder2 NetworkManager[9027]: [1462296924.7200] Config: added 'domain_suffix_match' value 'univie.ac.at' 19:35:24 pathfinder2 NetworkManager[9027]: [1462296924.7201] Config: added 'identity' value 'xxxxx@univie.ac.at' 19:35:24 pathfinder2 NetworkManager[9027]: [1462296924.7201] Config: added 'anonymous_identity' value '@univie.ac.at' 19:35:24 pathfinder2 NetworkManager[9027]: [1462296924.7201] Config: added 'bgscan' value 'simple:30:-65:300' 19:35:24 pathfinder2 NetworkManager[9027]: [1462296924.7201] Config: added 'proactive_key_caching' value '1' [...] 19:35:24 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-REGDOM-CHANGE init=COUNTRY_IE type=COUNTRY alpha2=DE 19:35:24 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-STARTED EAP authentication started 19:35:24 pathfinder2 kernel: [49303.864302] wlp3s0: Limiting TX power to 7 dBm as advertised by dc:a5:f4:4c:09:9e 19:35:25 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25 19:35:25 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected 19:35:26 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=US/O=DigiCert Inc/OU=www.digicert.com/CN=DigiCert Assured ID Root CA' hash=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 19:35:26 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-CERT depth=1 subject='/C=NL/ST=Noord-Holland/L=Amsterdam/O=TERENA/CN=TERENA SSL CA 3' hash=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 19:35:26 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=AT/ST=Vienna/L=Wien/O=Universit\xC3\xA4t Wien/OU=Zentraler Informatikdienst/CN=radius1.univie.ac.at' hash=xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx 19:35:26 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:radius1.univie.ac.at 19:35:26 pathfinder2 wpa_supplicant[1193]: EAP-MSCHAPV2: Authentication succeeded 19:35:26 pathfinder2 wpa_supplicant[1193]: EAP-TLV: TLV Result - Success - EAP-TLV/Phase2 Completed 19:35:26 pathfinder2 wpa_supplicant[1193]: wlp3s0: CTRL-EVENT-EAP-SUCCESS EAP authentication completed successfully