"No secrets were provided" when trying to connect to eduroam

Kladky · January 27, 2026, 3:20pm

I tried upgrading to the latest kernel, but then the original issue came back, but worse because specifying that separate certificate for Sectigo doesn’t work either. This persisted even when I switched back to the LTS kernel. Here are the logs using both fixes mentioned in Need unbundled CA certificates to connect to eduroam - #5 by rnhmjoj simultaneously (same happens when only using system-ca-certs:

Jan 27 14:51:30 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:30 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:30 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:31 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:31 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:31 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=25)
Jan 27 14:51:31 gram kernel: wlp0s20f3: associated
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:31 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:31 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:31 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:31 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:31 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:51:35 gram systemd[1]: NetworkManager-dispatcher.service: Deactivated successfully.
░░ The unit NetworkManager-dispatcher.service has successfully entered the 'dead' state.
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 14:51:42 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:43:d4 (SSID='eduroam' freq=6135 MHz)
Jan 27 14:51:42 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:43:d4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:42 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:43:d4 (try 1/3)
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:43:d4 (SSID='eduroam' freq=6135 MHz)
Jan 27 14:51:43 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:43 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:43:d4 (try 1/3)
Jan 27 14:51:43 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:43:d4 (capab=0x1011 status=0 aid=13)
Jan 27 14:51:43 gram kernel: wlp0s20f3: associated
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:43:d4
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:43 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:43 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:43 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:43 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:43:d4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:43:d4 reason=23
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=37 reason=AUTH_FAILED
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:43:d4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:43 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:43:d4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:51:56 gram NetworkManager[1196]: <warn>  [1769525516.4871] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:51:56 gram NetworkManager[1196]: <warn>  [1769525516.4876] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:43:d4 from ignore list (clear)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:c6:b4 from ignore list (clear)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:58 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:51:58 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:51:58 gram kernel: wlp0s20f3: authenticated
Jan 27 14:51:58 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:51:58 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=17)
Jan 27 14:51:58 gram kernel: wlp0s20f3: associated
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:51:58 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:51:59 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:51:59 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:51:59 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:51:59 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:51:59 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-REENABLED id=0 ssid="eduroam"
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 3, ignoring for 60 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:17:04 (SSID='eduroam' freq=6375 MHz)
Jan 27 14:52:12 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:17:04 (local address=8c:17:59:b5:9c:58)
Jan 27 14:52:12 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:17:04 (try 1/3)
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:17:04 (SSID='eduroam' freq=6375 MHz)
Jan 27 14:52:12 gram kernel: wlp0s20f3: authenticated
Jan 27 14:52:12 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:17:04 (try 1/3)
Jan 27 14:52:12 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:17:04 (capab=0x1011 status=0 aid=4)
Jan 27 14:52:12 gram kernel: wlp0s20f3: associated
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:17:04
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:52:12 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:52:12 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:52:12 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:52:12 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:17:04 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:17:04 reason=23
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=34 reason=AUTH_FAILED
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:17:04 into ignore list, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:17:04 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:12 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=3 duration=58 reason=CONN_FAILED
Jan 27 14:52:21 gram NetworkManager[1196]: <warn>  [1769525541.4861] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:52:21 gram NetworkManager[1196]: <warn>  [1769525541.4868] device (wlp0s20f3): Activation: (wifi) asking for new secrets
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:17:04 from ignore list (clear)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Removed BSSID ec:fc:c6:95:c6:b4 from ignore list (clear)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: SME: Trying to authenticate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:52:23 gram kernel: wlp0s20f3: authenticate with ec:fc:c6:95:c6:b4 (local address=8c:17:59:b5:9c:58)
Jan 27 14:52:23 gram kernel: wlp0s20f3: send auth to ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Trying to associate with ec:fc:c6:95:c6:b4 (SSID='eduroam' freq=5975 MHz)
Jan 27 14:52:23 gram kernel: wlp0s20f3: authenticated
Jan 27 14:52:23 gram kernel: wlp0s20f3: associate with ec:fc:c6:95:c6:b4 (try 1/3)
Jan 27 14:52:23 gram kernel: wlp0s20f3: RX AssocResp from ec:fc:c6:95:c6:b4 (capab=0x1011 status=0 aid=27)
Jan 27 14:52:23 gram kernel: wlp0s20f3: associated
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: Associated with ec:fc:c6:95:c6:b4
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-METHOD EAP vendor 0 method 25 (PEAP) selected
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' hash=92f351bf3d54164dfa8dd8f9e1139d3150349786485d2b9eecd00e2971c1e6c5
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-CERT depth=0 subject='/C=GB/ST=West Midlands/O=University of Birmingham/CN=wifi.bham.ac.uk' hash=c4f5594f78ad4ea67c5ec19f80a23a81ddaca6b7849172783ea58a5eb69c7530
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:wifi.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal01.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dubaivisitorportal02.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-01.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxb-p-cisise-02.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:dxbsponsorportal.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:idpp.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dbx.adf.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-PEER-ALT depth=0 DNS:ise-dxb.bham.ac.uk
Jan 27 14:52:23 gram wpa_supplicant[1286]: TLS: Certificate verification failed, error 20 (unable to get local issuer certificate) depth 2 for '/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46'
Jan 27 14:52:23 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-TLS-CERT-ERROR reason=1 depth=2 subject='/C=GB/O=Sectigo Limited/CN=Sectigo Public Server Authentication Root R46' err='unable to get local issuer certificate'
Jan 27 14:52:23 gram wpa_supplicant[1286]: SSL: SSL3 alert: write (local SSL3 detected an error):fatal:unknown CA
Jan 27 14:52:23 gram wpa_supplicant[1286]: OpenSSL: openssl_handshake - SSL_connect error:0A000086:SSL routines::certificate verify failed
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 14:52:24 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:c6:b4 (Reason: 23=IEEE8021X_FAILED)
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-DISCONNECTED bssid=ec:fc:c6:95:c6:b4 reason=23
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=1 duration=10 reason=AUTH_FAILED
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: Added BSSID ec:fc:c6:95:c6:b4 into ignore list, ignoring for 10 seconds
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: BSSID ec:fc:c6:95:c6:b4 ignore list count incremented to 2, ignoring for 10 seconds
Jan 27 14:52:24 gram wpa_supplicant[1286]: wlp0s20f3: CTRL-EVENT-SSID-TEMP-DISABLED id=0 ssid="eduroam" auth_failures=2 duration=25 reason=CONN_FAILED
Jan 27 14:52:46 gram NetworkManager[1196]: <warn>  [1769525566.4871] device (wlp0s20f3): Activation: (wifi) association took too long
Jan 27 14:52:46 gram NetworkManager[1196]: <warn>  [1769525566.5095] device (wlp0s20f3): Activation: failed for connection 'eduroam'

Logs when specifying the certificate to the one extracted from the Alpine Linux container (shorter snippet, just what I noticed was different to the one above):

Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: Associated with ec:fc:c6:95:62:34
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-STARTED EAP authentication started
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-SUBNET-STATUS-UPDATE status=0
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-PROPOSED-METHOD vendor=0 method=25
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: tls_connection_ca_cert - Failed to load root certificates error:80000002:system library::No such file or directory
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:10000080:BIO routines::no such file
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:05880020:x509 certificate routines::BIO lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: tls_load_ca_der - Failed load CA in DER format error:80000002:system library::No such file or directory
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:10080002:BIO routines::system lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: OpenSSL: pending error: error:05880020:x509 certificate routines::BIO lib
Jan 27 15:13:32 gram wpa_supplicant[12459]: TLS: Failed to set TLS connection parameters
Jan 27 15:13:32 gram wpa_supplicant[12459]: EAP-PEAP: Failed to initialize SSL.
Jan 27 15:13:32 gram wpa_supplicant[12459]: wlp0s20f3: EAP: Failed to initialize EAP method: vendor 0 method 25 (PEAP)
Jan 27 15:13:33 gram wpa_supplicant[12459]: wlp0s20f3: CTRL-EVENT-EAP-FAILURE EAP authentication failed
Jan 27 15:13:33 gram kernel: wlp0s20f3: deauthenticated from ec:fc:c6:95:62:34 (Reason: 23=IEEE8021X_FAILED)