"No secrets were provided" when trying to connect to eduroam

Kladky · January 27, 2026, 11:29am

After fixing this issue when trying to connect to eduroam, I unfortunately came across another. At first I was able to connect, but the next day, I was unable to connect, despite not (knowingly) changing anything about the system or the network configuration. I now get the following popup around 1 minute after pressing the “connect button”:

Output of journalctl -xb:

an 27 11:16:17 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:a3:4c:54 from ignore list (clear)
Jan 27 11:16:17 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:9f:0a:04 from ignore list (clear)
Jan 27 11:16:17 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:16:17 gram kernel: wlp0s20f3: authenticate with 48:00:20:9f:0a:04 (local address=8c:17:59:b5:9c:58)
Jan 27 11:16:17 gram kernel: wlp0s20f3: send auth to 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:16:18 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:16:18 gram kernel: wlp0s20f3: authenticated
Jan 27 11:16:18 gram kernel: wlp0s20f3: associate with 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:16:18 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:9f:0a:04 (capab=0x1011 status=0 aid=22)
Jan 27 11:16:18 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:16:18 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:16:18 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:9f:0a:04 into ignore list, ignoring for 10 seconds
Jan 27 11:16:18 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:16:18 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=CONN_FAILED
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 11:16:28 gram kernel: wlp0s20f3: authenticate with 48:00:20:9f:c0:d4 (local address=8c:17:59:b5:9c:58)
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:9f:c0:d4 (SSID='eduroam' freq=5975 MHz)
Jan 27 11:16:28 gram kernel: wlp0s20f3: send auth to 48:00:20:9f:c0:d4 (try 1/3)
Jan 27 11:16:28 gram kernel: wlp0s20f3: send auth to 48:00:20:9f:c0:d4 (try 2/3)
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:9f:c0:d4 (SSID='eduroam' freq=5975 MHz)
Jan 27 11:16:28 gram kernel: wlp0s20f3: authenticated
Jan 27 11:16:28 gram kernel: wlp0s20f3: associate with 48:00:20:9f:c0:d4 (try 1/3)
Jan 27 11:16:28 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:9f:c0:d4 (capab=0x1011 status=0 aid=23)
Jan 27 11:16:28 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:16:28 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:9f:c0:d4 into ignore list, ignoring for 10 seconds
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:c0:d4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:16:28 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=20 reason=CONN_FAILED
Jan 27 11:16:43 gram NetworkManager[10920]: <warn>  [1769512603.1635] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 11:16:43 gram NetworkManager[10920]: <warn>  [1769512603.1643] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:9f:c0:d4 from ignore list (clear)
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:9f:0a:04 from ignore list (clear)
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:16:43 gram kernel: wlp0s20f3: authenticate with 48:00:20:9f:0a:04 (local address=8c:17:59:b5:9c:58)
Jan 27 11:16:43 gram kernel: wlp0s20f3: send auth to 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:16:43 gram kernel: wlp0s20f3: authenticated
Jan 27 11:16:43 gram kernel: wlp0s20f3: associate with 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:16:43 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:9f:0a:04 (capab=0x1011 status=0 aid=22)
Jan 27 11:16:43 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:16:43 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:9f:0a:04 into ignore list, ignoring for 10 seconds
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:16:43 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=CONN_FAILED
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:a3:4c:54 (SSID='eduroam' freq=6055 MHz)
Jan 27 11:16:54 gram kernel: wlp0s20f3: authenticate with 48:00:20:a3:4c:54 (local address=8c:17:59:b5:9c:58)
Jan 27 11:16:54 gram kernel: wlp0s20f3: send auth to 48:00:20:a3:4c:54 (try 1/3)
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:a3:4c:54 (SSID='eduroam' freq=6055 MHz)
Jan 27 11:16:54 gram kernel: wlp0s20f3: authenticated
Jan 27 11:16:54 gram kernel: wlp0s20f3: associate with 48:00:20:a3:4c:54 (try 1/3)
Jan 27 11:16:54 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:a3:4c:54 (capab=0x1011 status=0 aid=29)
Jan 27 11:16:54 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:16:54 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:a3:4c:54 into ignore list, ignoring for 10 seconds
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:a3:4c:54 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:16:54 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=39 reason=CONN_FAILED
Jan 27 11:17:08 gram NetworkManager[10920]: <warn>  [1769512628.1633] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 11:17:08 gram NetworkManager[10920]: <warn>  [1769512628.1641] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:a3:4c:54 from ignore list (clear)
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: Removed BSSID 48:00:20:9f:0a:04 from ignore list (clear)
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:17:08 gram kernel: wlp0s20f3: authenticate with 48:00:20:9f:0a:04 (local address=8c:17:59:b5:9c:58)
Jan 27 11:17:08 gram kernel: wlp0s20f3: send auth to 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:9f:0a:04 (SSID='eduroam' freq=6295 MHz)
Jan 27 11:17:08 gram kernel: wlp0s20f3: authenticated
Jan 27 11:17:08 gram kernel: wlp0s20f3: associate with 48:00:20:9f:0a:04 (try 1/3)
Jan 27 11:17:08 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:9f:0a:04 (capab=0x1011 status=0 aid=15)
Jan 27 11:17:08 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:17:08 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:9f:0a:04 into ignore list, ignoring for 10 seconds
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:17:08 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=CONN_FAILED
Jan 27 11:17:18 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 11:17:18 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:9f:0a:04 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 11:17:19 gram kernel: wlp0s20f3: authenticate with 48:00:20:a3:4c:54 (local address=8c:17:59:b5:9c:58)
Jan 27 11:17:18 gram wpa_supplicant[8676]: wlp0s20f3: SME: Trying to authenticate with 48:00:20:a3:4c:54 (SSID='eduroam' freq=6055 MHz)
Jan 27 11:17:19 gram kernel: wlp0s20f3: send auth to 48:00:20:a3:4c:54 (try 1/3)
Jan 27 11:17:19 gram wpa_supplicant[8676]: wlp0s20f3: Trying to associate with 48:00:20:a3:4c:54 (SSID='eduroam' freq=6055 MHz)
Jan 27 11:17:19 gram kernel: wlp0s20f3: authenticated
Jan 27 11:17:19 gram kernel: wlp0s20f3: associate with 48:00:20:a3:4c:54 (try 1/3)
Jan 27 11:17:19 gram kernel: wlp0s20f3: RX AssocResp from 48:00:20:a3:4c:54 (capab=0x1011 status=0 aid=29)
Jan 27 11:17:19 gram kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
Jan 27 11:17:19 gram kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect
Jan 27 11:17:19 gram wpa_supplicant[8676]: wlp0s20f3: Added BSSID 48:00:20:a3:4c:54 into ignore list, ignoring for 10 seconds
Jan 27 11:17:19 gram wpa_supplicant[8676]: wlp0s20f3: BSSID 48:00:20:a3:4c:54 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 11:17:19 gram wpa_supplicant[8676]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=35 reason=CONN_FAILED
Jan 27 11:17:33 gram NetworkManager[10920]: <warn>  [1769512653.1641] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 11:17:33 gram NetworkManager[10920]: <warn>  [1769512653.1830] device (wlp0s20f3): Activation: failed for connection 'eduroam'

The password is stored directly in the nmconnection file, so I’m not sure how it’s unable to get the secret:

[connection]
id=eduroam
uuid=<UUID>
type=wifi

[wifi]
mode=infrastructure
ssid=eduroam

[wifi-security]
key-mgmt=wpa-eap

[802-1x]
domain-suffix-match=bham.ac.uk
system-ca-certs=true
eap=peap;
identity=<IDENTITY>
password=<PASSWORD>
phase2-auth=mschapv2

[ipv4]
method=auto

[ipv6]
addr-gen-mode=stable-privacy
method=auto

[proxy]

peterc-s · January 27, 2026, 12:57pm

Have you read through your University’s IT service desk page?

Can you check that the Sectigo certificate is installed:

grep "Sectigo" /etc/ssl/certs/ca-certificates.crt

According to your IT service desk, there should be one called Sectigo Public Server Authentication CA OV (which I can’t see on my machine).

You could also bother the IT service desk and see if they can figure out what’s up.

Kladky · January 27, 2026, 1:16pm

You might want to see my previous post about eduroam, which I mentioned at the beginning of this post, where I believe I fixed the issue you’re thinking of, as the logs now show different errors: Need unbundled CA certificates to connect to eduroam

rnhmjoj · January 27, 2026, 1:54pm

From the wpa_supplicant log it looks the password is wrong, however the kernel says this:

kernel: wlp0s20f3: authenticated
kernel: wlp0s20f3: associate with 48:00:20:9f:0a:04 (try 1/3)
kernel: wlp0s20f3: RX AssocResp from 48:00:20:9f:0a:04 (capab=0x1011 status=0 aid=22)

So, you had actually authenticated successfully.

NetworkManager[10920]: <warn>  [1769512603.1635] device (wlp0s20f3): Activation: (wifi) association took too long
NetworkManager[10920]: <warn>  [1769512603.1643] device (wlp0s20f3): Activation: (wifi) asking for new secrets

These messages are coming from a function in Networkmanager that says it’s called when

Connection failed; either driver problems, the encryption key is
         * wrong, or the passwords or certificates were wrong.

Since the kernel also says

kernel: wlp0s20f3: bad HE/EHT 6 GHz operation
kernel: wlp0s20f3: AP appears to change mode (expected HE, found legacy), disconnect

it seems there’s something wrong with the specific AP you have been connecting. I don’t know much about Wi-Fi 6, but it looks a mismatch in the bandwidth supposed to be used at that channel, according to what the kernel thinks is permitted.

Maybe an incorrect country setting? A kernel bug? Or even a misconfigured AP could be possible…

Kladky · January 27, 2026, 3:20pm

I tried upgrading to the latest kernel, but then the original issue came back, but worse because specifying that separate certificate for Sectigo doesn’t work either. This persisted even when I switched back to the LTS kernel. Here are the logs using both fixes mentioned in Need unbundled CA certificates to connect to eduroam - #5 by rnhmjoj simultaneously (same happens when only using system-ca-certs:

Jan 27 14:51:30 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:30 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:30 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:31 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:31 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:31 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=25)
Jan 27 14:51:31 gram kernel: wlp0s20f3: associated
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:31 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:31 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:31 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:51:35 gram systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.
░░ The unit NetworkManager-dispatcher.service has successfully entered the 'dead' state.
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:43:d4 (SSID='eduroam' freq=6135 MHz)
Jan 27 14:51:42 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:43:d4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:42 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:43:d4 (try 1/3)
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:43:d4 (SSID='eduroam' freq=6135 MHz)
Jan 27 14:51:43 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:43 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:43:d4 (try 1/3)
Jan 27 14:51:43 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:43:d4 (capab=0x1011 status=0 aid=13)
Jan 27 14:51:43 gram kernel: wlp0s20f3: associated
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:43:d4
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:43 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:43 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:43 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:43:d4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:43:d4 reason=23
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=37 reason=AUTH_FAILED
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:43:d4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:43:d4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:51:56 gram NetworkManager[1196]: <warn>  [1769525516.4871] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:51:56 gram NetworkManager[1196]: <warn>  [1769525516.4876] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:43:d4 from ignore list (clear)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:c6:b4 from ignore list (clear)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:58 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:58 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:58 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:58 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:58 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=17)
Jan 27 14:51:58 gram kernel: wlp0s20f3: associated
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:59 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:59 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:59 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:17:04 (SSID='eduroam' freq=6375 MHz)
Jan 27 14:52:12 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:17:04 (local address=8c:17:59:b5:9c:58)
Jan 27 14:52:12 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:17:04 (try 1/3)
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:17:04 (SSID='eduroam' freq=6375 MHz)
Jan 27 14:52:12 gram kernel: wlp0s20f3: authenticated
Jan 27 14:52:12 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:17:04 (try 1/3)
Jan 27 14:52:12 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:17:04 (capab=0x1011 status=0 aid=4)
Jan 27 14:52:12 gram kernel: wlp0s20f3: associated
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:17:04
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:52:12 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:52:12 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:52:12 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:17:04 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:17:04 reason=23
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=34 reason=AUTH_FAILED
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:17:04 into ignore list, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:17:04 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=3 duration=58 reason=CONN_FAILED
Jan 27 14:52:21 gram NetworkManager[1196]: <warn>  [1769525541.4861] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:52:21 gram NetworkManager[1196]: <warn>  [1769525541.4868] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:17:04 from ignore list (clear)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:c6:b4 from ignore list (clear)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:52:23 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:52:23 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:52:23 gram kernel: wlp0s20f3: authenticated
Jan 27 14:52:23 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:52:23 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=27)
Jan 27 14:52:23 gram kernel: wlp0s20f3: associated
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:52:23 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:52:23 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:52:24 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=25 reason=CONN_FAILED
Jan 27 14:52:46 gram NetworkManager[1196]: <warn>  [1769525566.4871] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:52:46 gram NetworkManager[1196]: <warn>  [1769525566.5095] device (wlp0s20f3): Activation: failed for connection 'eduroam'

Logs when specifying the certificate to the one extracted from the Alpine Linux container (shorter snippet, just what I noticed was different to the one above):

Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: Associated with ec:fc:c6:95:62:34
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:80000002:system library::No such file or directory
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:10000080:BIO routines::no such file
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:05880020:x509 certificate routines::BIO lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: tls_load_ca_der - Failed load CA in DER format error:80000002:system library::No such file or directory
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:10080002:BIO routines::system lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:05880020:x509 certificate routines::BIO lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: TLS: Failed to set TLS connection parameters
Jan 27 15:13:32 gram wpa_supplicant[12459]: EAP-PEAP: Failed to initialize SSL.
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: EAP: Failed to initialize EAP method: vendor 0 method 25 (PEAP)
Jan 27 15:13:33 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 15:13:33 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:62:34 (Reason: 23=IEEE8021X_FAILED)

Kladky · January 27, 2026, 3:23pm

I just tried specifying ca-cert=/etc/ssl/certs/ca-bundle.crt again, and somehow that fixed the problem, despite that not working before? I’m really confused, but at least it works again now.

Kladky · February 3, 2026, 3:19pm

Turns out you were right, as I noticed that this issue only happens in one specific building. I will ask the IT department about the issue, but is there something that could be done on my system to get around the issue, incase this happens somewhere other than my own university? I never had this issue before in this building before I switched to NixOS, and I am still able to use eduroam on my phone in that building.

rnhmjoj · February 3, 2026, 10:33pm

You can just disable disable WiFi 6 if it still causes problem.

Kladky · February 3, 2026, 11:22pm

In the process of trying to eliminate other choices before disabling Wi-Fi 6 as a last resort, I noticed that is appears I don’t have a country code set, could that be part of the issue?

$ iw reg get
global
country 00: DFS-UNSET
        (755 - 928 @ 2), (N/A, 20), (N/A), PASSIVE-SCAN
        (2402 - 2472 @ 40), (N/A, 20), (N/A)
        (2457 - 2482 @ 20), (N/A, 20), (N/A), AUTO-BW, PASSIVE-SCAN
        (2474 - 2494 @ 20), (N/A, 20), (N/A), NO-OFDM, PASSIVE-SCAN
        (5170 - 5250 @ 80), (N/A, 20), (N/A), AUTO-BW, PASSIVE-SCAN
        (5250 - 5330 @ 80), (N/A, 20), (0 ms), DFS, AUTO-BW, PASSIVE-SCAN
        (5490 - 5730 @ 160), (N/A, 20), (0 ms), DFS, PASSIVE-SCAN
        (5735 - 5835 @ 80), (N/A, 20), (N/A), PASSIVE-SCAN
        (57240 - 63720 @ 2160), (N/A, 0), (N/A)

phy#0 (self-managed)
country 00: DFS-UNSET
        (2402 - 2437 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40MINUS, NO-80MHZ, NO-160MHZ
        (2422 - 2462 @ 40), (6, 22), (N/A), AUTO-BW, NO-80MHZ, NO-160MHZ
        (2447 - 2482 @ 40), (6, 22), (N/A), AUTO-BW, NO-HT40PLUS, NO-80MHZ, NO-160MHZ
        (5170 - 5190 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5190 - 5210 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5210 - 5230 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5230 - 5250 @ 160), (6, 22), (N/A), NO-OUTDOOR, AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5250 - 5270 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5270 - 5290 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5290 - 5310 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5310 - 5330 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5490 - 5510 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5510 - 5530 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5530 - 5550 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5550 - 5570 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5570 - 5590 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5590 - 5610 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5610 - 5630 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-320MHZ, PASSIVE-SCAN
        (5630 - 5650 @ 160), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-320MHZ, PASSIVE-SCAN
        (5650 - 5670 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5670 - 5690 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5690 - 5710 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5710 - 5730 @ 80), (6, 22), (0 ms), DFS, AUTO-BW, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5735 - 5755 @ 80), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5755 - 5775 @ 80), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5775 - 5795 @ 80), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5795 - 5815 @ 80), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40PLUS, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN
        (5815 - 5835 @ 40), (6, 22), (N/A), AUTO-BW, IR-CONCURRENT, NO-HT40MINUS, NO-80MHZ, NO-160MHZ, NO-320MHZ, PASSIVE-SCAN

Kladky · February 3, 2026, 11:26pm

And according to [RESPONDED] Does anyone have wifi 6e working in linux with the AX210? - #53 by Danny_Colin - Linux - Framework Community, Wi-FI 6 might already be disabled anyways?

$ iw phy0 channels
Band 1:
        * 2412 MHz [1]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40+
        * 2417 MHz [2]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40+
        * 2422 MHz [3]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40+
        * 2427 MHz [4]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40+
        * 2432 MHz [5]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40- HT40+
        * 2437 MHz [6]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40- HT40+
        * 2442 MHz [7]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40- HT40+
        * 2447 MHz [8]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40- HT40+
        * 2452 MHz [9]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40- HT40+
        * 2457 MHz [10]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40-
        * 2462 MHz [11]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40-
        * 2467 MHz [12]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40-
        * 2472 MHz [13]
          Maximum TX power: 22.0 dBm
          Channel widths: 20MHz HT40-
        * 2484 MHz [14] (disabled)
Band 2:
        * 5180 MHz [36]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40+ VHT80 VHT160
        * 5200 MHz [40]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40- VHT80 VHT160
        * 5220 MHz [44]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40+ VHT80 VHT160
        * 5240 MHz [48]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40- VHT80 VHT160
        * 5260 MHz [52]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5280 MHz [56]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5300 MHz [60]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5320 MHz [64]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5340 MHz [68] (disabled)
        * 5360 MHz [72] (disabled)
        * 5380 MHz [76] (disabled)
        * 5400 MHz [80] (disabled)
        * 5420 MHz [84] (disabled)
        * 5440 MHz [88] (disabled)
        * 5460 MHz [92] (disabled)
        * 5480 MHz [96] (disabled)
        * 5500 MHz [100]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5520 MHz [104]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5540 MHz [108]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5560 MHz [112]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5580 MHz [116]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5600 MHz [120]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5620 MHz [124]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5640 MHz [128]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80 VHT160
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5660 MHz [132]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5680 MHz [136]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5700 MHz [140]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40+ VHT80
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5720 MHz [144]
          Maximum TX power: 22.0 dBm
          No IR
          Radar detection
          Channel widths: 20MHz HT40- VHT80
          DFS state: usable (for 18853 sec)
          DFS CAC time: 60000 ms
        * 5745 MHz [149]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40+ VHT80
        * 5765 MHz [153]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40- VHT80
        * 5785 MHz [157]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40+ VHT80
        * 5805 MHz [161]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz HT40- VHT80
        * 5825 MHz [165]
          Maximum TX power: 22.0 dBm
          No IR
          Channel widths: 20MHz
        * 5845 MHz [169] (disabled)
        * 5865 MHz [173] (disabled)
        * 5885 MHz [177] (disabled)
        * 5905 MHz [181] (disabled)
Band 4:
        * 5955 MHz [1] (disabled)
        * 5975 MHz [5] (disabled)
        * 5995 MHz [9] (disabled)
        * 6015 MHz [13] (disabled)
        * 6035 MHz [17] (disabled)
        * 6055 MHz [21] (disabled)
        * 6075 MHz [25] (disabled)
        * 6095 MHz [29] (disabled)
        * 6115 MHz [33] (disabled)
        * 6135 MHz [37] (disabled)
        * 6155 MHz [41] (disabled)
        * 6175 MHz [45] (disabled)
        * 6195 MHz [49] (disabled)
        * 6215 MHz [53] (disabled)
        * 6235 MHz [57] (disabled)
        * 6255 MHz [61] (disabled)
        * 6275 MHz [65] (disabled)
        * 6295 MHz [69] (disabled)
        * 6315 MHz [73] (disabled)
        * 6335 MHz [77] (disabled)
        * 6355 MHz [81] (disabled)
        * 6375 MHz [85] (disabled)
        * 6395 MHz [89] (disabled)
        * 6415 MHz [93] (disabled)
        * 6435 MHz [97] (disabled)
        * 6455 MHz [101] (disabled)
        * 6475 MHz [105] (disabled)
        * 6495 MHz [109] (disabled)
        * 6515 MHz [113] (disabled)
        * 6535 MHz [117] (disabled)
        * 6555 MHz [121] (disabled)
        * 6575 MHz [125] (disabled)
        * 6595 MHz [129] (disabled)
        * 6615 MHz [133] (disabled)
        * 6635 MHz [137] (disabled)
        * 6655 MHz [141] (disabled)
        * 6675 MHz [145] (disabled)
        * 6695 MHz [149] (disabled)
        * 6715 MHz [153] (disabled)
        * 6735 MHz [157] (disabled)
        * 6755 MHz [161] (disabled)
        * 6775 MHz [165] (disabled)
        * 6795 MHz [169] (disabled)
        * 6815 MHz [173] (disabled)
        * 6835 MHz [177] (disabled)
        * 6855 MHz [181] (disabled)
        * 6875 MHz [185] (disabled)
        * 6895 MHz [189] (disabled)
        * 6915 MHz [193] (disabled)
        * 6935 MHz [197] (disabled)
        * 6955 MHz [201] (disabled)
        * 6975 MHz [205] (disabled)
        * 6995 MHz [209] (disabled)
        * 7015 MHz [213] (disabled)
        * 7035 MHz [217] (disabled)
        * 7055 MHz [221] (disabled)
        * 7075 MHz [225] (disabled)
        * 7095 MHz [229] (disabled)
        * 7115 MHz [233] (disabled)