This bleeds into Information Security Exchange, however I am posting it here:

Suppose I am extremely paranoid and want to ensure my Pis only connect to WiFi access points with a certificate signed by my own home brewed CA (i.e. I created my own root CA certificate, and then signed a certificate with that).

How would I do this? How do I tell the Pi "connect to this SSID, and if the cert isn't signed by this CA, abort"?

  • @Ephemeral Clarified.
    – Tim Morris
    Sep 5, 2019 at 20:41
  • If you set up your WPA client for this, it will do it for you ... sorry I thought at first that you wanted to also create a secure access point.
    – Ephemeral
    Sep 5, 2019 at 22:04
  • wpa_supplicant.conf and search with tls keyword and ca_cert.
    – Ephemeral
    Sep 5, 2019 at 22:12


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Browse other questions tagged or ask your own question.