It seems that the wpasupplicant package issued with Strecth uses newer communication protocols that are not correctly supported by the Eduroam access points that we are using. Therefore, a previous version of this tool should be installed.

In the case of Raspbian Stretch the solution is to include the previous version repositories (Jessie) and install the wpa_supplicant of that version.

Create the file /etc/apt/sources.list.d/jessie.list with:

deb http://mirrordirector.raspbian.org/raspbian/ jessie main

Create the file /etc/apt/preferences.d/jessie with:

Package: *
release o=Raspbian,n=jessie
Pin-Priority: -1

Update the package list with:

$ sudo apt-get update

Test the available versions of wpasupplicant with:

$ sudo apt-cache policy wpasupplicant

Install and block the jessie version with:

$ sudo apt-get install wpasupplicant=2.3-1+deb8u5
$ sudo apt-mark hold wpasupplicant

The next configuration could vary depending on the centre you are accessing to Eduroam. You should search which configuration should be used on the place from where you are trying to access Eduroam. Another possibility is to download the Eduroam configuration assistant tool, and see if your centre is already on it.

At the Universitat Jaume I, the configuration that has to be added to /etc/wpa_supplicant/wpa_supplicant.conf is:

network={ 
       ssid="eduroam" 
       scan_ssid=1 
       key_mgmt=WPA-EAP 
       eap=PEAP 
       identity="XXXXX@uji.es" 
       password="XXXXX"
       phase1="peaplabel=0" 
       phase2="auth=MSCHAPV2" 
}

Instead of using the plain text password, a hash password can be generated with:

echo -n plaintext_password_here | iconv -t utf16le | openssl md4

Then, prefix the resutl with “hash:” and put it in the wpa_supplicant.conf file, i.e.:

       password=hash:6602f435fc3f54388a31238d3b9bdcfd0b