Just in case anyone is trying to do TinyPEAP and wpa_supplicant, the configuration on the tinyPEAP website needs to be amended to this: phase1="include_tls_length=1 peaplabel=0" instead of phase1="peaplabel=0" I still haven't figured out how to get the certificate in the right format, but that'll come later. -rcs