easyroam-linux

Setup eduroam with easyroam on unsupported linux devices.

Motivation

German universities (as of the time of writing) are switching from the official eduroam client to easyroam by DFN in october 2024. Since I needed to set up Wi-Fi on my Fedora notebook, I tried to follow their guide but quickly realized that they only officially provide a .deb client for Debian-based distributions and porting the file with alien did not work.

So, I sent an email asking for an .rpm package, and they responded with:

[...] uns ist es leider nicht möglich die easyroam app für RHEL/Fedora basierte Distros (.rpm Package) und/oder für die vielen anderen proprietären Linux Derivate zur Verfügung zu stellen. Das wird uns leider niemals gelingen.

which roughly translates to: no, never.

I started following their guide for a manual setup with NetworkManager but realized that they assume you can only use NetworkManager on Debian, which is not always the case. So, here are two small scripts to make your life easier: one for extracting certificate and key files from a PKCS#12 (.p12) bundle file, and another for directly setting up easyroam/eduroam on Fedora (and possibly other distributions as well).

Currently, the direct setup has been tested only on Fedora with NetworkManager, but I can extend support to other distributions and other network managers if there is interest.

Usage

Step 1: Obtaining certificate

1. Open https://www.easyroam.de
2. Search for your university and log in
3. Navigate to Generate profile
4. Select manual options, choose PKCS12 and enter your device name
5. Download the file by clicking on the Generate profile button

Step 2: Install/create toolbox container (needed for openssl)

1. Create a toolbox container:

toolbox create easyroam

and type y to confirm installation 2. General usage: To enter, type:

toolbox enter easyroam

To exit, type:

toolbox exit

Step 3: Download

Network Manager

Install easyroam/eduroam on Fedora Atomic using NetworkManager

Warning

Tested only on Fedora Silverblue 40

Note

For distributions with a "standard" package manager, refer to the original script from jahtz

Tip

To remove the generated configuration, delete the file /etc/NetworkManager/system-connections/easyroam.nmconnection
or run: nmcli connection delete easyroam

1. Download the certificate script:

curl -o easyroam_cert.sh https://raw.githubusercontent.com/kimuraseki/easyroam-linux/main/easyroam_cert.sh

2. Make it executable:

chmod +x easyroam_cert.sh

3. Run setup (IN the toolbox container):

./easyroam_cert.sh

4. Save your identity!
5. Download the NetworkManager script:

curl -o easyroam_nm.sh https://raw.githubusercontent.com/kimuraseki/easyroam-linux/main/easyroam.nm.sh

6. Make it executable:

chmod +x easyroam_nm.sh

7. Run setup (OUTSIDE the toolbox container):

./easyroam_nm.sh

Resulting files:

• easyroam_root_ca.pem → CA certificate
• easyroam_client_cert.pem → User certificate
• easyroam_client_key.pem → Private key