The DFN has blessed us with easyroam, and at least at my Uni it is now mandatory. To set it up declaratively you’d need to extract a PKCS File and manually point wpa_supplicant/Network Manager to the resulting pem files. For even more fun, you need to redo this every few months.
I’ve written a NixOS Module that makes this less annoying. Just point it to the PKCS File and it will automatically extract it for you. It can also optionally configure the wpa_supplicant or Network Manager connection. Hope anyone finds this useful!
easyroam is the successor to eduroam, a wifi system for universities. it allows students to have wifi at “foreign” universities (as long as they use eduroam as well). i dont actually know if its used outside of germany though