network={
	proto=WPA2
	ssid="eduroam"
	key_mgmt=WPA-EAP
	eap=TTLS
	# Phase1 / outer authentication
	anonymous_identity="anonymous@your_organisation_here.lu"
	ca_cert="/etc/ssl/certs/eduroam-lu-root-cert.pem"
	subject_match="your.auth-server-name.here.lu"
	# Phase 2 / inner authentication
        phase2="auth=PAP"
	identity="username@your_organisation_here.lu"
	password="keepitsecret"
}