使 wpa_supplicant 忽略伺服器憑證信任

使 wpa_supplicant 忽略伺服器憑證信任

如何使 wpa_supplicant 接受 PEAP MSCHAPv2 的任何伺服器證書,而無需手動將公鑰放入客戶端配置中?

答案1

只需不在wpa_supplicant.conf 檔案中包含ca_cert或標記/值對即可。ca_path

來自範例 wpa_supplicant.conf 檔案。注意第三句(強調我的):

# ca_cert: File path to CA certificate file (PEM/DER). This file can have one # or more trusted CA certificates. If ca_cert and ca_path are not # included, server certificate will not be verified. This is insecure and # a trusted CA certificate should always be configured when using # EAP-TLS/TTLS/PEAP. Full path should be used since working directory may # change when wpa_supplicant is run in the background.

相關內容