network={
scan_ssid=1
ssid="crew.sublab.org"
key_mgmt=WPA-EAP
eap=TTLS
phase2="auth=PAP"
identity="${username}"
password="${_("insert password here")}"
anonymous_identity="bernd"
ca_cert="/etc/ssl/certs/cacert.org.pem"
altsubject_match="DNS:taifun.local.sublab.org"
priority=500
}