SEANK.H.LIAO

wpa eap tls

it still doesn't work

Get TLS chain from Wifi

create a monitoring interface

1sudo iw dev wlp58s0 interface add wmon type monitor
2sudo ip link set wmon up

wireshark filter for eap and (re)auth against the AP, Check for Server Hello

Note: if you get Unrecognized Protocol in place of Server Hello, just try again...

Export the certificates and start thinking about what to do with them :shrug: