wpa_supplicant WPA-EAP template

network={
	scan_ssid=1
	ssid="crew.sublab.org"

	key_mgmt=WPA-EAP
	eap=TTLS
	phase2="auth=PAP"

	identity="${username}"
	password="insert password here"

	anonymous_identity="bernd"
	ca_cert="/etc/ssl/certs/cacert.org.pem"
	altsubject_match="DNS:taifun.local.sublab.org"
	priority=500
}