NMSetting8021x

@@ -37,3091 +31,3780 @@

NMSetting8021x

NMSetting8021x — Describes 802.1x-authenticated connection properties

- +

Synopsis

-#include <nm-setting-8021x.h>
-
-enum                NMSetting8021xCKFormat;
-enum                NMSetting8021xCKScheme;
-#define             NM_SETTING_802_1X_SETTING_NAME
-enum                NMSetting8021xError;
-#define             NM_SETTING_802_1X_ERROR
-GQuark              nm_setting_802_1x_error_quark       (void);
-#define             NM_SETTING_802_1X_EAP
-#define             NM_SETTING_802_1X_IDENTITY
-#define             NM_SETTING_802_1X_ANONYMOUS_IDENTITY
-#define             NM_SETTING_802_1X_PAC_FILE
-#define             NM_SETTING_802_1X_CA_CERT
-#define             NM_SETTING_802_1X_CA_PATH
-#define             NM_SETTING_802_1X_SUBJECT_MATCH
-#define             NM_SETTING_802_1X_ALTSUBJECT_MATCHES
-#define             NM_SETTING_802_1X_CLIENT_CERT
-#define             NM_SETTING_802_1X_PHASE1_PEAPVER
-#define             NM_SETTING_802_1X_PHASE1_PEAPLABEL
-#define             NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING
-#define             NM_SETTING_802_1X_PHASE2_AUTH
-#define             NM_SETTING_802_1X_PHASE2_AUTHEAP
-#define             NM_SETTING_802_1X_PHASE2_CA_CERT
-#define             NM_SETTING_802_1X_PHASE2_CA_PATH
-#define             NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH
-#define             NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES
-#define             NM_SETTING_802_1X_PHASE2_CLIENT_CERT
-#define             NM_SETTING_802_1X_PASSWORD
-#define             NM_SETTING_802_1X_PASSWORD_FLAGS
-#define             NM_SETTING_802_1X_PASSWORD_RAW
-#define             NM_SETTING_802_1X_PASSWORD_RAW_FLAGS
-#define             NM_SETTING_802_1X_PRIVATE_KEY
-#define             NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD
-#define             NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD_FLAGS
-#define             NM_SETTING_802_1X_PHASE2_PRIVATE_KEY
-#define             NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD
-#define             NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD_FLAGS
-#define             NM_SETTING_802_1X_PIN
-#define             NM_SETTING_802_1X_PIN_FLAGS
-#define             NM_SETTING_802_1X_SYSTEM_CA_CERTS
-                    NMSetting8021x;
-                    NMSetting8021xClass;
-NMSetting *         nm_setting_802_1x_new               (void);
-guint32             nm_setting_802_1x_get_num_eap_methods
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_eap_method    (NMSetting8021x *setting,
-                                                         guint32 i);
-gboolean            nm_setting_802_1x_add_eap_method    (NMSetting8021x *setting,
-                                                         const char *eap);
-void                nm_setting_802_1x_remove_eap_method (NMSetting8021x *setting,
-                                                         guint32 i);
-void                nm_setting_802_1x_clear_eap_methods (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_identity      (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_anonymous_identity
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_pac_file      (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_get_system_ca_certs
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_ca_path       (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_ca_path
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_ca_cert_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_ca_cert_blob  (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_ca_cert_path  (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_ca_cert       (NMSetting8021x *setting,
-                                                         const char *cert_path,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_subject_match (NMSetting8021x *setting);
-guint32             nm_setting_802_1x_get_num_altsubject_matches
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         guint32 i);
-gboolean            nm_setting_802_1x_add_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         const char *altsubject_match);
-void                nm_setting_802_1x_remove_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         guint32 i);
-void                nm_setting_802_1x_clear_altsubject_matches
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_client_cert_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_client_cert_blob
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_client_cert_path
-                                                        (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_client_cert   (NMSetting8021x *setting,
-                                                         const char *cert_path,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_phase1_peapver
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase1_peaplabel
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase1_fast_provisioning
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_auth   (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_autheap
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_phase2_ca_cert_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_phase2_ca_cert_blob
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_ca_cert_path
-                                                        (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_phase2_ca_cert
-                                                        (NMSetting8021x *setting,
-                                                         const char *cert_path,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_phase2_subject_match
-                                                        (NMSetting8021x *setting);
-guint32             nm_setting_802_1x_get_num_phase2_altsubject_matches
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         guint32 i);
-gboolean            nm_setting_802_1x_add_phase2_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         const char *phase2_altsubject_match);
-void                nm_setting_802_1x_remove_phase2_altsubject_match
-                                                        (NMSetting8021x *setting,
-                                                         guint32 i);
-void                nm_setting_802_1x_clear_phase2_altsubject_matches
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_phase2_client_cert_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_phase2_client_cert_blob
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_client_cert_path
-                                                        (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_phase2_client_cert
-                                                        (NMSetting8021x *setting,
-                                                         const char *cert_path,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_password      (NMSetting8021x *setting);
-NMSettingSecretFlags nm_setting_802_1x_get_password_flags
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_password_raw  (NMSetting8021x *setting);
-NMSettingSecretFlags nm_setting_802_1x_get_password_raw_flags
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_pin           (NMSetting8021x *setting);
-NMSettingSecretFlags nm_setting_802_1x_get_pin_flags    (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_private_key_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_private_key_blob
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_private_key_path
-                                                        (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_private_key   (NMSetting8021x *setting,
-                                                         const char *key_path,
-                                                         const char *password,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_private_key_password
-                                                        (NMSetting8021x *setting);
-NMSettingSecretFlags nm_setting_802_1x_get_private_key_password_flags
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKFormat nm_setting_802_1x_get_private_key_format
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKScheme nm_setting_802_1x_get_phase2_private_key_scheme
-                                                        (NMSetting8021x *setting);
-const GByteArray *  nm_setting_802_1x_get_phase2_private_key_blob
-                                                        (NMSetting8021x *setting);
-const char *        nm_setting_802_1x_get_phase2_private_key_path
-                                                        (NMSetting8021x *setting);
-gboolean            nm_setting_802_1x_set_phase2_private_key
-                                                        (NMSetting8021x *setting,
-                                                         const char *key_path,
-                                                         const char *password,
-                                                         NMSetting8021xCKScheme scheme,
-                                                         NMSetting8021xCKFormat *out_format,
-                                                         GError **error);
-const char *        nm_setting_802_1x_get_phase2_private_key_password
-                                                        (NMSetting8021x *setting);
-NMSettingSecretFlags nm_setting_802_1x_get_phase2_private_key_password_flags
-                                                        (NMSetting8021x *setting);
-NMSetting8021xCKFormat nm_setting_802_1x_get_phase2_private_key_format
-                                                        (NMSetting8021x *setting);
-

Object Hierarchy

-  GEnum
-   +----NMSetting8021xCKFormat
-

-  GEnum
-   +----NMSetting8021xCKScheme
-

-  GEnum
-   +----NMSetting8021xError
-

-  GObject
-   +----NMSetting
-         +----NMSetting8021x
-

Functions

++++ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

+GQuark +	+nm_setting_802_1x_error_quark () +
+NMSetting * +	+nm_setting_802_1x_new () +
+guint32 +	+nm_setting_802_1x_get_num_eap_methods () +
const char * +	+nm_setting_802_1x_get_eap_method () +
+gboolean +	+nm_setting_802_1x_add_eap_method () +
+void +	+nm_setting_802_1x_remove_eap_method () +
+void +	+nm_setting_802_1x_clear_eap_methods () +
const char * +	+nm_setting_802_1x_get_identity () +
const char * +	+nm_setting_802_1x_get_anonymous_identity () +
const char * +	+nm_setting_802_1x_get_pac_file () +
+gboolean +	+nm_setting_802_1x_get_system_ca_certs () +
const char * +	+nm_setting_802_1x_get_ca_path () +
const char * +	+nm_setting_802_1x_get_phase2_ca_path () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_ca_cert_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_ca_cert_blob () +
const char * +	+nm_setting_802_1x_get_ca_cert_path () +
+gboolean +	+nm_setting_802_1x_set_ca_cert () +
const char * +	+nm_setting_802_1x_get_subject_match () +
+guint32 +	+nm_setting_802_1x_get_num_altsubject_matches () +
const char * +	+nm_setting_802_1x_get_altsubject_match () +
+gboolean +	+nm_setting_802_1x_add_altsubject_match () +
+void +	+nm_setting_802_1x_remove_altsubject_match () +
+void +	+nm_setting_802_1x_clear_altsubject_matches () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_client_cert_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_client_cert_blob () +
const char * +	+nm_setting_802_1x_get_client_cert_path () +
+gboolean +	+nm_setting_802_1x_set_client_cert () +
const char * +	+nm_setting_802_1x_get_phase1_peapver () +
const char * +	+nm_setting_802_1x_get_phase1_peaplabel () +
const char * +	+nm_setting_802_1x_get_phase1_fast_provisioning () +
const char * +	+nm_setting_802_1x_get_phase2_auth () +
const char * +	+nm_setting_802_1x_get_phase2_autheap () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_phase2_ca_cert_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_phase2_ca_cert_blob () +
const char * +	+nm_setting_802_1x_get_phase2_ca_cert_path () +
+gboolean +	+nm_setting_802_1x_set_phase2_ca_cert () +
const char * +	+nm_setting_802_1x_get_phase2_subject_match () +
+guint32 +	+nm_setting_802_1x_get_num_phase2_altsubject_matches () +
const char * +	+nm_setting_802_1x_get_phase2_altsubject_match () +
+gboolean +	+nm_setting_802_1x_add_phase2_altsubject_match () +
+void +	+nm_setting_802_1x_remove_phase2_altsubject_match () +
+void +	+nm_setting_802_1x_clear_phase2_altsubject_matches () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_phase2_client_cert_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_phase2_client_cert_blob () +
const char * +	+nm_setting_802_1x_get_phase2_client_cert_path () +
+gboolean +	+nm_setting_802_1x_set_phase2_client_cert () +
const char * +	+nm_setting_802_1x_get_password () +
+NMSettingSecretFlags +	+nm_setting_802_1x_get_password_flags () +
const GByteArray * +	+nm_setting_802_1x_get_password_raw () +
+NMSettingSecretFlags +	+nm_setting_802_1x_get_password_raw_flags () +
const char * +	+nm_setting_802_1x_get_pin () +
+NMSettingSecretFlags +	+nm_setting_802_1x_get_pin_flags () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_private_key_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_private_key_blob () +
const char * +	+nm_setting_802_1x_get_private_key_path () +
+gboolean +	+nm_setting_802_1x_set_private_key () +
const char * +	+nm_setting_802_1x_get_private_key_password () +
+NMSettingSecretFlags +	+nm_setting_802_1x_get_private_key_password_flags () +
+NMSetting8021xCKFormat +	+nm_setting_802_1x_get_private_key_format () +
+NMSetting8021xCKScheme +	+nm_setting_802_1x_get_phase2_private_key_scheme () +
const GByteArray * +	+nm_setting_802_1x_get_phase2_private_key_blob () +
const char * +	+nm_setting_802_1x_get_phase2_private_key_path () +
+gboolean +	+nm_setting_802_1x_set_phase2_private_key () +
const char * +	+nm_setting_802_1x_get_phase2_private_key_password () +
+NMSettingSecretFlags +	+nm_setting_802_1x_get_phase2_private_key_password_flags () +
+NMSetting8021xCKFormat +	+nm_setting_802_1x_get_phase2_private_key_format () +

Properties

-  "altsubject-matches"       GSList_gchararray_*   : Read / Write
-  "anonymous-identity"       gchar*                : Read / Write
-  "ca-cert"                  GArray_guchar_*       : Read / Write
-  "ca-path"                  gchar*                : Read / Write
-  "client-cert"              GArray_guchar_*       : Read / Write
-  "eap"                      GSList_gchararray_*   : Read / Write
-  "identity"                 gchar*                : Read / Write
-  "pac-file"                 gchar*                : Read / Write
-  "password"                 gchar*                : Read / Write
-  "password-flags"           guint                 : Read / Write
-  "password-raw"             GArray_guchar_*       : Read / Write
-  "password-raw-flags"       guint                 : Read / Write
-  "phase1-fast-provisioning" gchar*                : Read / Write
-  "phase1-peaplabel"         gchar*                : Read / Write
-  "phase1-peapver"           gchar*                : Read / Write
-  "phase2-altsubject-matches" GSList_gchararray_*   : Read / Write
-  "phase2-auth"              gchar*                : Read / Write
-  "phase2-autheap"           gchar*                : Read / Write
-  "phase2-ca-cert"           GArray_guchar_*       : Read / Write
-  "phase2-ca-path"           gchar*                : Read / Write
-  "phase2-client-cert"       GArray_guchar_*       : Read / Write
-  "phase2-private-key"       GArray_guchar_*       : Read / Write
-  "phase2-private-key-password" gchar*                : Read / Write
-  "phase2-private-key-password-flags" guint                 : Read / Write
-  "phase2-subject-match"     gchar*                : Read / Write
-  "pin"                      gchar*                : Read / Write
-  "pin-flags"                guint                 : Read / Write
-  "private-key"              GArray_guchar_*       : Read / Write
-  "private-key-password"     gchar*                : Read / Write
-  "private-key-password-flags" guint                 : Read / Write
-  "subject-match"            gchar*                : Read / Write
-  "system-ca-certs"          gboolean              : Read / Write / Construct
-

Description

-The NMSetting8021x object is a NMSetting subclass that describes -properties necessary for connection to 802.1x-authenticated networks, such as -WPA and WPA2 Enterprise WiFi networks and wired 802.1x networks. 802.1x -connections typically use certificates and/or EAP authentication methods to -securely verify, identify, and authenticate the client to the network itself, -instead of simply relying on a widely shared static key. -

-It's a good idea to read up on wpa_supplicant configuration before using this -setting extensively, since most of the options here correspond closely with -the relevant wpa_supplicant configuration options. -

-Furthermore, to get a good idea of 802.1x, EAP, TLS, TTLS, etc and their -applications to WiFi and wired networks, you'll want to get copies of the -following books. -

- 802.11 Wireless Networks: The Definitive Guide, Second Edition - Author: Matthew Gast - ISBN: 978-0596100520 -

- Cisco Wireless LAN Security - Authors: Krishna Sankar, Sri Sundaralingam, Darrin Miller, and Andrew Balinsky - ISBN: 978-1587051548 -

+GSList_gchararray_ *	altsubject-matches	Read / Write
+gchar *	anonymous-identity	Read / Write
+GArray_guchar_ *	ca-cert	Read / Write
+gchar *	ca-path	Read / Write
+GArray_guchar_ *	client-cert	Read / Write
+GSList_gchararray_ *	eap	Read / Write
+gchar *	identity	Read / Write
+gchar *	pac-file	Read / Write
+gchar *	password	Read / Write
guint	password-flags	Read / Write
+GArray_guchar_ *	password-raw	Read / Write
guint	password-raw-flags	Read / Write
+gchar *	phase1-fast-provisioning	Read / Write
+gchar *	phase1-peaplabel	Read / Write
+gchar *	phase1-peapver	Read / Write
+GSList_gchararray_ *	phase2-altsubject-matches	Read / Write
+gchar *	phase2-auth	Read / Write
+gchar *	phase2-autheap	Read / Write
+GArray_guchar_ *	phase2-ca-cert	Read / Write
+gchar *	phase2-ca-path	Read / Write
+GArray_guchar_ *	phase2-client-cert	Read / Write
+GArray_guchar_ *	phase2-private-key	Read / Write
+gchar *	phase2-private-key-password	Read / Write
guint	phase2-private-key-password-flags	Read / Write
+gchar *	phase2-subject-match	Read / Write
+gchar *	pin	Read / Write
guint	pin-flags	Read / Write
+GArray_guchar_ *	private-key	Read / Write
+gchar *	private-key-password	Read / Write
guint	private-key-password-flags	Read / Write
+gchar *	subject-match	Read / Write
gboolean	system-ca-certs	Read / Write / Construct

Details

enum NMSetting8021xCKFormat

typedef enum {
- /*< underscore_name=nm_setting_802_1x_ck_format >*/
-	NM_SETTING_802_1X_CK_FORMAT_UNKNOWN = 0,
-	NM_SETTING_802_1X_CK_FORMAT_X509,
-	NM_SETTING_802_1X_CK_FORMAT_RAW_KEY,
-	NM_SETTING_802_1X_CK_FORMAT_PKCS12
-} NMSetting8021xCKFormat;
-

-NMSetting8021xCKFormat values indicate the general type of a certificate -or private key -

Types and Values

--++ - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + - - + + - - + + - - + + - -

`NM_SETTING_802_1X_CK_FORMAT_UNKNOWN`	unknown file format -	enum	NMSetting8021xCKFormat
enum	NMSetting8021xCKScheme
#define	NM_SETTING_802_1X_SETTING_NAME
enum	NMSetting8021xError
#define	NM_SETTING_802_1X_ERROR
#define	NM_SETTING_802_1X_EAP
#define	NM_SETTING_802_1X_IDENTITY
#define	NM_SETTING_802_1X_ANONYMOUS_IDENTITY
#define	NM_SETTING_802_1X_PAC_FILE
#define	NM_SETTING_802_1X_CA_CERT
#define	NM_SETTING_802_1X_CA_PATH
#define	NM_SETTING_802_1X_SUBJECT_MATCH
#define	NM_SETTING_802_1X_ALTSUBJECT_MATCHES
#define	NM_SETTING_802_1X_CLIENT_CERT
#define	NM_SETTING_802_1X_PHASE1_PEAPVER
#define	NM_SETTING_802_1X_PHASE1_PEAPLABEL
#define	NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING
#define	NM_SETTING_802_1X_PHASE2_AUTH
#define	NM_SETTING_802_1X_PHASE2_AUTHEAP
`NM_SETTING_802_1X_CK_FORMAT_X509`	file contains an X.509 format certificate -	#define	NM_SETTING_802_1X_PHASE2_CA_CERT
`NM_SETTING_802_1X_CK_FORMAT_RAW_KEY`	file contains an old-style OpenSSL PEM -or DER private key -	#define	NM_SETTING_802_1X_PHASE2_CA_PATH
`NM_SETTING_802_1X_CK_FORMAT_PKCS12`	file contains a PKCS12 certificate -and private key -	#define	NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH

enum NMSetting8021xCKScheme

typedef enum {
- /*< underscore_name=nm_setting_802_1x_ck_scheme >*/
-	NM_SETTING_802_1X_CK_SCHEME_UNKNOWN = 0,
-	NM_SETTING_802_1X_CK_SCHEME_BLOB,
-	NM_SETTING_802_1X_CK_SCHEME_PATH
-} NMSetting8021xCKScheme;
-

-NMSetting8021xCKScheme values indicate how a certificate or private key is -stored in the setting properties, either as a blob of the item's data, or as -a path to a certificate or private key file on the filesystem -

---- - - - + + - - + + - - + + - -

`NM_SETTING_802_1X_CK_SCHEME_UNKNOWN`	unknown certificate or private key -scheme -	#define	NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES
`NM_SETTING_802_1X_CK_SCHEME_BLOB`	certificate or key is stored as the raw -item data -	#define	NM_SETTING_802_1X_PHASE2_CLIENT_CERT
`NM_SETTING_802_1X_CK_SCHEME_PATH`	certificate or key is stored as a path -to a file containing the certificate or key data -	#define	NM_SETTING_802_1X_PASSWORD

NM_SETTING_802_1X_SETTING_NAME

#define NM_SETTING_802_1X_SETTING_NAME "802-1x"
-

enum NMSetting8021xError

typedef enum {
- /*< underscore_name=nm_setting_802_1x_error >*/
-	NM_SETTING_802_1X_ERROR_UNKNOWN = 0,      /*< nick=UnknownError >*/
-	NM_SETTING_802_1X_ERROR_INVALID_PROPERTY, /*< nick=InvalidProperty >*/
-	NM_SETTING_802_1X_ERROR_MISSING_PROPERTY  /*< nick=MissingProperty >*/
-} NMSetting8021xError;
-

---- - - - + + - - + + - - + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

`NM_SETTING_802_1X_ERROR_UNKNOWN`	unknown or unclassified error -	#define	NM_SETTING_802_1X_PASSWORD_FLAGS
`NM_SETTING_802_1X_ERROR_INVALID_PROPERTY`	the property was invalid -	#define	NM_SETTING_802_1X_PASSWORD_RAW
`NM_SETTING_802_1X_ERROR_MISSING_PROPERTY`	the property was missing and is -required -	#define	NM_SETTING_802_1X_PASSWORD_RAW_FLAGS
#define	NM_SETTING_802_1X_PRIVATE_KEY
#define	NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD
#define	NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD_FLAGS
#define	NM_SETTING_802_1X_PHASE2_PRIVATE_KEY
#define	NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD
#define	NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD_FLAGS
#define	NM_SETTING_802_1X_PIN
#define	NM_SETTING_802_1X_PIN_FLAGS
#define	NM_SETTING_802_1X_SYSTEM_CA_CERTS

NM_SETTING_802_1X_ERROR

#define NM_SETTING_802_1X_ERROR nm_setting_802_1x_error_quark ()
-

nm_setting_802_1x_error_quark ()

GQuark              nm_setting_802_1x_error_quark       (void);

-Registers an error quark for NMSetting8021x if necessary. -

---- - - - - -

Returns :

the error quark used for NMSetting8021x errors.

NM_SETTING_802_1X_EAP

#define NM_SETTING_802_1X_EAP "eap"
-

NM_SETTING_802_1X_IDENTITY

#define NM_SETTING_802_1X_IDENTITY "identity"
-

NM_SETTING_802_1X_ANONYMOUS_IDENTITY

#define NM_SETTING_802_1X_ANONYMOUS_IDENTITY "anonymous-identity"
-

NM_SETTING_802_1X_PAC_FILE

#define NM_SETTING_802_1X_PAC_FILE "pac-file"
-

NM_SETTING_802_1X_CA_CERT

#define NM_SETTING_802_1X_CA_CERT "ca-cert"
-

NM_SETTING_802_1X_CA_PATH

#define NM_SETTING_802_1X_CA_PATH "ca-path"
-

NM_SETTING_802_1X_SUBJECT_MATCH

#define NM_SETTING_802_1X_SUBJECT_MATCH "subject-match"
-

NM_SETTING_802_1X_ALTSUBJECT_MATCHES

#define NM_SETTING_802_1X_ALTSUBJECT_MATCHES "altsubject-matches"
-

NM_SETTING_802_1X_CLIENT_CERT

#define NM_SETTING_802_1X_CLIENT_CERT "client-cert"
-

NM_SETTING_802_1X_PHASE1_PEAPVER

#define NM_SETTING_802_1X_PHASE1_PEAPVER "phase1-peapver"
-

NM_SETTING_802_1X_PHASE1_PEAPLABEL

#define NM_SETTING_802_1X_PHASE1_PEAPLABEL "phase1-peaplabel"
-

NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING

#define NM_SETTING_802_1X_PHASE1_FAST_PROVISIONING "phase1-fast-provisioning"
+
+Object Hierarchy
+    GEnum
+    ├── NMSetting8021xCKFormat
+    ├── NMSetting8021xCKScheme
+    ╰── NMSetting8021xError
+    GObject
+    ╰── NMSetting
+        ╰── NMSetting8021x
 
-
-
 
-
-
-NM_SETTING_802_1X_PHASE2_AUTH
-#define NM_SETTING_802_1X_PHASE2_AUTH "phase2-auth"
+
+Includes
+#include <nm-setting-8021x.h>
 
-
-
 
-
-
-NM_SETTING_802_1X_PHASE2_AUTHEAP
-#define NM_SETTING_802_1X_PHASE2_AUTHEAP "phase2-autheap"
-
-
-
+
+Description
+The NMSetting8021x object is a NMSetting subclass that describes
+properties necessary for connection to 802.1x-authenticated networks, such as
+WPA and WPA2 Enterprise WiFi networks and wired 802.1x networks.  802.1x
+connections typically use certificates and/or EAP authentication methods to
+securely verify, identify, and authenticate the client to the network itself,
+instead of simply relying on a widely shared static key.
+It's a good idea to read up on wpa_supplicant configuration before using this
+setting extensively, since most of the options here correspond closely with
+the relevant wpa_supplicant configuration options.
+Furthermore, to get a good idea of 802.1x, EAP, TLS, TTLS, etc and their
+applications to WiFi and wired networks, you'll want to get copies of the
+following books.
+ 802.11 Wireless Networks: The Definitive Guide, Second Edition
+      Author: Matthew Gast
+      ISBN: 978-0596100520
+ Cisco Wireless LAN Security
+      Authors: Krishna Sankar, Sri Sundaralingam, Darrin Miller, and Andrew Balinsky
+      ISBN: 978-1587051548
 
-
+
+Functions
 
-NM_SETTING_802_1X_PHASE2_CA_CERT
-#define NM_SETTING_802_1X_PHASE2_CA_CERT "phase2-ca-cert"
-
-
-
+nm_setting_802_1x_error_quark ()
+GQuark
+nm_setting_802_1x_error_quark (void);
+Registers an error quark for NMSetting8021x if necessary.
+
+Returns
+ the error quark used for NMSetting8021x errors.
+
 
-
-
-NM_SETTING_802_1X_PHASE2_CA_PATH
-#define NM_SETTING_802_1X_PHASE2_CA_PATH "phase2-ca-path"
-
-
-
 
 
 
-NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH
-#define NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH "phase2-subject-match"
-
-
-
+nm_setting_802_1x_new ()
+NMSetting *
+nm_setting_802_1x_new (void);
+Creates a new NMSetting8021x object with default values.
+
+Returns
+ the new empty NMSetting8021x object
+
 
-
-
-NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES
-#define NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES "phase2-altsubject-matches"
-
-
-
 
 
 
-NM_SETTING_802_1X_PHASE2_CLIENT_CERT
-#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT "phase2-client-cert"
-
-
-
+nm_setting_802_1x_get_num_eap_methods ()
+guint32
+nm_setting_802_1x_get_num_eap_methods (NMSetting8021x *setting);
+Returns the number of eap methods allowed for use when connecting to the
+network.  Generally only one EAP method is used.  Use the functions
+nm_setting_802_1x_get_eap_method(), nm_setting_802_1x_add_eap_method(),
+and nm_setting_802_1x_remove_eap_method() for adding, removing, and retrieving
+allowed EAP methods.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
 
-
-
-NM_SETTING_802_1X_PASSWORD
-#define NM_SETTING_802_1X_PASSWORD "password"
-
-
-
+
+Returns
+ the number of allowed EAP methods
+
 
-
-
-NM_SETTING_802_1X_PASSWORD_FLAGS
-#define NM_SETTING_802_1X_PASSWORD_FLAGS "password-flags"
-
-
-
 
 
 
-NM_SETTING_802_1X_PASSWORD_RAW
-#define NM_SETTING_802_1X_PASSWORD_RAW "password-raw"
-
-
-
+nm_setting_802_1x_get_eap_method ()
+const char *
+nm_setting_802_1x_get_eap_method (NMSetting8021x *setting,
+                                  guint32 i);
+Returns the name of the allowed EAP method at index i
+.
+
+Parameters
+
+++++
+
+
+
+
+
+
+
+
+
+
+
+
+



setting the NMSetting8021x  
i the index of the EAP method name to return  
 
-
-
-NM_SETTING_802_1X_PASSWORD_RAW_FLAGS
-#define NM_SETTING_802_1X_PASSWORD_RAW_FLAGS "password-raw-flags"
-
-
+

+Returns
+ the name of the allowed EAP method at index i
 
+
+
 
 
 
-NM_SETTING_802_1X_PRIVATE_KEY
-#define NM_SETTING_802_1X_PRIVATE_KEY "private-key"
-
-
-
+nm_setting_802_1x_add_eap_method ()
+gboolean
+nm_setting_802_1x_add_eap_method (NMSetting8021x *setting,
+                                  const char *eap);
+Adds an allowed EAP method.  The setting is not valid until at least one
+EAP method has been added.  See “eap” property for a list of
+allowed EAP methods.
+
+Parameters
+
+++++
+
+
+
+
+
+
+
+
+
+
+
+
+



setting the NMSetting8021x  
eap the name of the EAP method to allow for this connection  
+
+
+Returns
+ TRUE if the EAP method was successfully added, FALSE if it was
+not a valid method or if it was already allowed.
+
+
 
 
 
-NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD
-#define NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD "private-key-password"
-
-
-
+nm_setting_802_1x_remove_eap_method ()
+void
+nm_setting_802_1x_remove_eap_method (NMSetting8021x *setting,
+                                     guint32 i);
+Removes the allowed EAP method at the specified index.
+
+Parameters
+
+++++
+
+
+
+
+
+
+
+
+
+
+
+
+



setting the NMSetting8021x  
i the index of the EAP method to remove  
+
 
 
 
-NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD_FLAGS
-#define NM_SETTING_802_1X_PRIVATE_KEY_PASSWORD_FLAGS "private-key-password-flags"
-
-
-
+nm_setting_802_1x_clear_eap_methods ()
+void
+nm_setting_802_1x_clear_eap_methods (NMSetting8021x *setting);
+Clears all allowed EAP methods.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
 
 
 
-NM_SETTING_802_1X_PHASE2_PRIVATE_KEY
-#define NM_SETTING_802_1X_PHASE2_PRIVATE_KEY "phase2-private-key"
-
-
-
+nm_setting_802_1x_get_identity ()
+const char *
+nm_setting_802_1x_get_identity (NMSetting8021x *setting);
+Returns the identifier used by some EAP methods (like TLS) to
+authenticate the user.  Often this is a username or login name.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the user identifier
+
+
 
 
 
-NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD
-#define NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD "phase2-private-key-password"
-
-
-
+nm_setting_802_1x_get_anonymous_identity ()
+const char *
+nm_setting_802_1x_get_anonymous_identity
+                               (NMSetting8021x *setting);
+Returns the anonymous identifier used by some EAP methods (like TTLS) to
+authenticate the user in the outer unencrypted "phase 1" authentication.  The
+inner "phase 2" authentication will use the “identity” in
+a secure form, if applicable for that EAP method.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the anonymous identifier
+
+
 
 
 
-NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD_FLAGS
-#define NM_SETTING_802_1X_PHASE2_PRIVATE_KEY_PASSWORD_FLAGS "phase2-private-key-password-flags"
-
-
-
+nm_setting_802_1x_get_pac_file ()
+const char *
+nm_setting_802_1x_get_pac_file (NMSetting8021x *setting);
+Returns the file containing PAC credentials used by EAP-FAST method.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the PAC file
+
+
 
 
 
-NM_SETTING_802_1X_PIN
-#define NM_SETTING_802_1X_PIN "pin"
-
-
-
+nm_setting_802_1x_get_system_ca_certs ()
+gboolean
+nm_setting_802_1x_get_system_ca_certs (NMSetting8021x *setting);
+Sets the “system-ca-certs” property. The
+“ca-path” and “phase2-ca-path”
+properties are ignored if the “system-ca-certs” property is
+TRUE, in which case a system-wide CA certificate directory specified at
+compile time (using the --system-ca-path configure option) is used in place
+of these properties.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ TRUE if a system CA certificate path should be used, FALSE if not
+
+
 
 
 
-NM_SETTING_802_1X_PIN_FLAGS
-#define NM_SETTING_802_1X_PIN_FLAGS "pin-flags"
-
-
-
+nm_setting_802_1x_get_ca_path ()
+const char *
+nm_setting_802_1x_get_ca_path (NMSetting8021x *setting);
+Returns the path of the CA certificate directory if previously set.  Systems
+will often have a directory that contains multiple individual CA certificates
+which the supplicant can then add to the verification chain.  This may be
+used in addition to the “ca-cert” property to add more CA
+certificates for verifying the network to client.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the CA certificate directory path
+
+
 
 
 
-NM_SETTING_802_1X_SYSTEM_CA_CERTS
-#define NM_SETTING_802_1X_SYSTEM_CA_CERTS "system-ca-certs"
-
-
-
+nm_setting_802_1x_get_phase2_ca_path ()
+const char *
+nm_setting_802_1x_get_phase2_ca_path (NMSetting8021x *setting);
+Returns the path of the "phase 2" CA certificate directory if previously set.
+Systems will often have a directory that contains multiple individual CA
+certificates which the supplicant can then add to the verification chain.
+This may be used in addition to the “phase2-ca-cert” property
+to add more CA certificates for verifying the network to client.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the "phase 2" CA certificate directory path
+
+
 
 
 
-NMSetting8021x
-typedef struct _NMSetting8021x NMSetting8021x;
-
-
+nm_setting_802_1x_get_ca_cert_scheme ()
+NMSetting8021xCKScheme
+nm_setting_802_1x_get_ca_cert_scheme (NMSetting8021x *setting);
+Returns the scheme used to store the CA certificate.  If the returned scheme
+is NM_SETTING_802_1X_CK_SCHEME_BLOB, use nm_setting_802_1x_get_ca_cert_blob();
+if NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_ca_cert_path().
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ scheme used to store the CA certificate (blob or path)
+
+
 
 
 
-NMSetting8021xClass
-typedef struct {
-	NMSettingClass parent;
-
-	/* Padding for future expansion */
-	void (*_reserved1) (void);
-	void (*_reserved2) (void);
-	void (*_reserved3) (void);
-	void (*_reserved4) (void);
-} NMSetting8021xClass;
-
-
-
+nm_setting_802_1x_get_ca_cert_blob ()
+const GByteArray *
+nm_setting_802_1x_get_ca_cert_blob (NMSetting8021x *setting);
+Returns the CA certificate blob if the CA certificate is stored using the
+NM_SETTING_802_1X_CK_SCHEME_BLOB scheme.  Not all EAP methods use a
+CA certificate (LEAP for example), and those that can take advantage of the
+CA certificate allow it to be unset.  Note that lack of a CA certificate
+reduces security by allowing man-in-the-middle attacks, because the identity
+of the network cannot be confirmed by the client.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the CA certificate data
+
+
 
 
 
-nm_setting_802_1x_new ()
-NMSetting *         nm_setting_802_1x_new               (void);
-
-Creates a new NMSetting8021x object with default values.
-
-
+nm_setting_802_1x_get_ca_cert_path ()
+const char *
+nm_setting_802_1x_get_ca_cert_path (NMSetting8021x *setting);
+Returns the CA certificate path if the CA certificate is stored using the
+NM_SETTING_802_1X_CK_SCHEME_PATH scheme.  Not all EAP methods use a
+CA certificate (LEAP for example), and those that can take advantage of the
+CA certificate allow it to be unset.  Note that lack of a CA certificate
+reduces security by allowing man-in-the-middle attacks, because the identity
+of the network cannot be confirmed by the client.
+
+Parameters
+
--+++
-
-
+
+
+
 





 
 Returns : the new empty NMSetting8021x object setting the NMSetting8021x  
 
 
 
+
+Returns
+ path to the CA certificate file
+
+
+
 
 
-nm_setting_802_1x_get_num_eap_methods ()
-guint32             nm_setting_802_1x_get_num_eap_methods
-                                                        (NMSetting8021x *setting);
-
-Returns the number of eap methods allowed for use when connecting to the
-network.  Generally only one EAP method is used.  Use the functions
-nm_setting_802_1x_get_eap_method(), nm_setting_802_1x_add_eap_method(),
-and nm_setting_802_1x_remove_eap_method() for adding, removing, and retrieving
-allowed EAP methods.
-
-
+nm_setting_802_1x_set_ca_cert ()
+gboolean
+nm_setting_802_1x_set_ca_cert (NMSetting8021x *setting,
+                               const char *cert_path,
+                               NMSetting8021xCKScheme scheme,
+                               NMSetting8021xCKFormat *out_format,
+                               GError **error);
+Reads a certificate from disk and sets the “ca-cert” property
+with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB
+scheme, or with the path to the certificate file if using the
+NM_SETTING_802_1X_CK_SCHEME_PATH scheme.
+
+Parameters
+
--+++
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
+
+
+
+
+
+
+
+
 





 
 
 setting : the NMSetting8021x
- setting the NMSetting8021x  
cert_path when scheme
+is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
+or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the CA certificate
+file (PEM or DER format).  The path must be UTF-8 encoded; use
+g_filename_to_utf8() to convert if needed.  Passing NULL with any scheme
+clears the CA certificate.  
scheme desired storage scheme for the certificate  
 
 Returns : the number of allowed EAP methods out_format on successful return, the type of the certificate added  
error on unsuccessful return, an error  
 
 
 
 
+
+Returns
+ TRUE if the operation succeeded, FALSE if it was unsuccessful
+
+
+
 
 
-nm_setting_802_1x_get_eap_method ()
-const char *        nm_setting_802_1x_get_eap_method    (NMSetting8021x *setting,
-                                                         guint32 i);
-
-Returns the name of the allowed EAP method at index i.
-
-
+nm_setting_802_1x_get_subject_match ()
+const char *
+nm_setting_802_1x_get_subject_match (NMSetting8021x *setting);
+
+Parameters
+

+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the “subject-match” property. This is the
+substring to be matched against the subject of the authentication
+server certificate, or NULL no subject verification is to be
+performed.
+
+
+
+
+
+nm_setting_802_1x_get_num_altsubject_matches ()
+guint32
+nm_setting_802_1x_get_num_altsubject_matches
+                               (NMSetting8021x *setting);
+Returns the number of entries in the
+“altsubject-matches” property of this setting.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the number of altsubject-matches entries.
+
+
+
+
+
+nm_setting_802_1x_get_altsubject_match ()
+const char *
+nm_setting_802_1x_get_altsubject_match
+                               (NMSetting8021x *setting,
+                                guint32 i);
+Returns the altSubjectName match at index i
+.
+
+Parameters
+--+++
-
-
-
-
-
-
+
+
+
-
-
+
+
+
 





 
 
 setting : the NMSetting8021x
-
i : the index of the EAP method name to return setting the NMSettingConnection  
 
 Returns : the name of the allowed EAP method at index i
- i the zero-based index of the array of altSubjectName matches  
 
 
 
 
+
+Returns
+ the altSubjectName match at index i
+
+
+
+
 
 
-nm_setting_802_1x_add_eap_method ()
-gboolean            nm_setting_802_1x_add_eap_method    (NMSetting8021x *setting,
-                                                         const char *eap);
-
-Adds an allowed EAP method.  The setting is not valid until at least one
-EAP method has been added.  See "eap" property for a list of
-allowed EAP methods.
-
-
+nm_setting_802_1x_add_altsubject_match ()
+gboolean
+nm_setting_802_1x_add_altsubject_match
+                               (NMSetting8021x *setting,
+                                const char *altsubject_match);
+Adds an allowed alternate subject name match.  Until at least one
+match is added, the altSubjectName of the remote authentication
+server is not verified.
+
+Parameters
+
--+++
-
-
-
-
-
-
+
+
+
-
-
+
+
+
 





 
 
 setting : the NMSetting8021x
-
eap : the name of the EAP method to allow for this connection setting the NMSetting8021x  
 
 Returns : TRUE if the EAP method was successfully added, FALSE if it was
-not a valid method or if it was already allowed. altsubject_match the altSubjectName to allow for this connection  
 
 
 
 
+
+Returns
+ TRUE if the alternative subject name match was
+successfully added, FALSE if it was already allowed.
+
+
+
 
 
-nm_setting_802_1x_remove_eap_method ()
-void                nm_setting_802_1x_remove_eap_method (NMSetting8021x *setting,
-                                                         guint32 i);
-
-Removes the allowed EAP method at the specified index.
-
-
+nm_setting_802_1x_remove_altsubject_match ()
+void
+nm_setting_802_1x_remove_altsubject_match
+                               (NMSetting8021x *setting,
+                                guint32 i);
+Removes the allowed altSubjectName at the specified index.
+
+Parameters
+
--+++
-
-
+
+
+
-
-
+
+
+
 





 
 
 setting : the NMSetting8021x
- setting the NMSetting8021x  
 
 i : the index of the EAP method to remove i the index of the altSubjectName match to remove  
 
 
 
 
+
 
 
-nm_setting_802_1x_clear_eap_methods ()
-void                nm_setting_802_1x_clear_eap_methods (NMSetting8021x *setting);
-
-Clears all allowed EAP methods.
-
-
+nm_setting_802_1x_clear_altsubject_matches ()
+void
+nm_setting_802_1x_clear_altsubject_matches
+                               (NMSetting8021x *setting);
+Clears all altSubjectName matches.
+
+Parameters
+

+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+
+
+nm_setting_802_1x_get_client_cert_scheme ()
+NMSetting8021xCKScheme
+nm_setting_802_1x_get_client_cert_scheme
+                               (NMSetting8021x *setting);
+Returns the scheme used to store the client certificate.  If the returned scheme
+is NM_SETTING_802_1X_CK_SCHEME_BLOB, use nm_setting_802_1x_get_client_cert_blob();
+if NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_client_cert_path().
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ scheme used to store the client certificate (blob or path)
+
+
+
+
+
+nm_setting_802_1x_get_client_cert_blob ()
+const GByteArray *
+nm_setting_802_1x_get_client_cert_blob
+                               (NMSetting8021x *setting);
+Client certificates are used to identify the connecting client to the network
+when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
+authentication method.
+
+Parameters
+
+++++
+
+
+
+
+
+



setting the NMSetting8021x  
+
+
+Returns
+ the client certificate data
+
+
+
+
+
+nm_setting_802_1x_get_client_cert_path ()
+const char *
+nm_setting_802_1x_get_client_cert_path
+                               (NMSetting8021x *setting);
+Client certificates are used to identify the connecting client to the network
+when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
+authentication method.
+
+Parameters
+--+++
-
-
+
+
+
 





 
 setting : the NMSetting8021x
- setting the NMSetting8021x  
 
 
 
+
+Returns
+ path to the client certificate file
+
+
+
 
 
-nm_setting_802_1x_get_identity ()
-const char *        nm_setting_802_1x_get_identity      (NMSetting8021x *setting);
-
-Returns the identifier used by some EAP methods (like TLS) to
-authenticate the user.  Often this is a username or login name.
-
-
+nm_setting_802_1x_set_client_cert ()
+gboolean
+nm_setting_802_1x_set_client_cert (NMSetting8021x *setting,
+                                   const char *cert_path,
+                                   NMSetting8021xCKScheme scheme,
+                                   NMSetting8021xCKFormat *out_format,
+                                   GError **error);
+Reads a certificate from disk and sets the “client-cert”
+property with the raw certificate data if using the
+NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate
+file if using the NM_SETTING_802_1X_CK_SCHEME_PATH scheme.
+Client certificates are used to identify the connecting client to the network
+when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
+authentication method.
+
+Parameters
+
--+++
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
-
-
+
+
+
+
+
+
+
+
 





 
 
 setting : the NMSetting8021x
- setting the NMSetting8021x  
cert_path when scheme
+is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
+or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the client
+certificate file (PEM, DER, or PKCS12 format).  The path must be UTF-8
+encoded; use g_filename_to_utf8() to convert if needed.  Passing NULL with
+any scheme
+clears the client certificate.  
scheme desired storage scheme for the certificate  
 
 Returns : the user identifier out_format on successful return, the type of the certificate added  
error on unsuccessful return, an error  
 
 
 
 
+
+Returns
+ TRUE if the operation succeeded, FALSE if it was unsuccessful
+
+
+
 
 
-nm_setting_802_1x_get_anonymous_identity ()
-const char *        nm_setting_802_1x_get_anonymous_identity
-                                                        (NMSetting8021x *setting);
-
-Returns the anonymous identifier used by some EAP methods (like TTLS) to
-authenticate the user in the outer unencrypted "phase 1" authentication.  The
-inner "phase 2" authentication will use the "identity" in
-a secure form, if applicable for that EAP method.
-
-
+nm_setting_802_1x_get_phase1_peapver ()
+const char *
+nm_setting_802_1x_get_phase1_peapver (NMSetting8021x *setting);
+
+Parameters
+
--+++
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
 





 setting : the NMSetting8021x
-
Returns : the anonymous identifier
setting the NMSetting8021x  
 
 
+
+Returns
+ the "phase 1" PEAP version to be used when authenticating with
+EAP-PEAP as contained in the “phase1-peapver” property.  Valid
+values are NULL (unset), "0" (PEAP version 0), and "1" (PEAP version 1).
+
+
+
 
 
-nm_setting_802_1x_get_pac_file ()
-const char *        nm_setting_802_1x_get_pac_file      (NMSetting8021x *setting);
-
-Returns the file containing PAC credentials used by EAP-FAST method.
-
-
+nm_setting_802_1x_get_phase1_peaplabel ()
+const char *
+nm_setting_802_1x_get_phase1_peaplabel
+                               (NMSetting8021x *setting);
+
+Parameters
+
--+++
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
 





 setting : the NMSetting8021x
-
Returns : the PAC file
setting the NMSetting8021x  
 
 
+
+Returns
+ whether the "phase 1" PEAP label is new-style or old-style, to be
+used when authenticating with EAP-PEAP, as contained in the
+“phase1-peaplabel” property.  Valid values are NULL (unset),
+"0" (use old-style label), and "1" (use new-style label).  See the
+wpa_supplicant documentation for more details.
+
+
+

nm_setting_802_1x_get_system_ca_certs ()

gboolean            nm_setting_802_1x_get_system_ca_certs
-                                                        (NMSetting8021x *setting);

-Sets the "system-ca-certs" property. The -"ca-path" and "phase2-ca-path" -properties are ignored if the "system-ca-certs" property is -TRUE, in which case a system-wide CA certificate directory specified at -compile time (using the --system-ca-path configure option) is used in place -of these properties. -

nm_setting_802_1x_get_phase1_fast_provisioning ()

const char *
+nm_setting_802_1x_get_phase1_fast_provisioning
+                               (NMSetting8021x *setting);

Parameters

--+++ - - - - - - - - - - + + + + +

`setting` :	the NMSetting8021x -
Returns :	TRUE if a system CA certificate path should be used, FALSE if not
setting	the NMSetting8021x

Returns

whether "phase 1" PEAP fast provisioning should be used, as specified +by the “phase1-fast-provisioning” property. See the +wpa_supplicant documentation for more details.

nm_setting_802_1x_get_ca_path ()

const char *        nm_setting_802_1x_get_ca_path       (NMSetting8021x *setting);

-Returns the path of the CA certificate directory if previously set. Systems -will often have a directory that contains multiple individual CA certificates -which the supplicant can then add to the verification chain. This may be -used in addition to the "ca-cert" property to add more CA -certificates for verifying the network to client. -

nm_setting_802_1x_get_phase2_auth ()

const char *
+nm_setting_802_1x_get_phase2_auth (NMSetting8021x *setting);

Parameters

--+++ - - - - - - - - - - + + + + +

`setting` :	the NMSetting8021x -
Returns :	the CA certificate directory path
setting	the NMSetting8021x

Returns

the "phase 2" non-EAP (ex MD5) allowed authentication method as +specified by the “phase2-auth” property.

Property Details

The `“altsubject-matches”` property

  “altsubject-matches”       GSList_gchararray_ *

List of strings to be matched against the altSubjectName of the certificate presented by the authentication server. If the list is empty, no verification of the server certificate's altSubjectName is performed.

Flags: Read / Write

The `“anonymous-identity”` property

  “anonymous-identity”       gchar *

Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS.

Flags: Read / Write

Default value: NULL

The `"pac-file"` property

  "pac-file"                 gchar*                : Read / Write

-UTF-8 encoded file path containing PAC for EAP-FAST. -

The `“ca-cert”` property

  “ca-cert”                  GArray_guchar_ *

Contains the CA certificate if used by the EAP method specified in the 'eap' property. Certificate data is specified using a 'scheme'; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string 'file://' and ending with a terminating NULL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.

Flags: Read / Write

The `“ca-path”` property

  “ca-path”                  gchar *

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the 'ca-cert' property.

Flags: Read / Write

Default value: NULL

The `"password"` property

  "password"                 gchar*                : Read / Write

-Password used for EAP authentication methods. If both -"password" and "password-raw" are -specified, "password" is preferred. -

The `“client-cert”` property

  “client-cert”              GArray_guchar_ *

Contains the client certificate if used by the EAP method specified in the 'eap' property. Certificate data is specified using a 'scheme'; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string 'file://' and ending with a terminating NULL byte.

Flags: Read / Write

The `“eap”` property

  “eap”                      GSList_gchararray_ *

The allowed EAP method to be used when authenticating to the network with 802.1x. Valid methods are: 'leap', 'md5', 'tls', 'peap', 'ttls', and 'fast'. Each method requires different configuration using the properties of this setting; refer to wpa_supplicant documentation for the allowed combinations.

Flags: Read / Write

The `“identity”` property

  “identity”                 gchar *

Identity string for EAP authentication methods. Often the user's user or login name.

Flags: Read / Write

Default value: NULL

The `"password-flags"` property

  "password-flags"           guint                 : Read / Write

-Flags indicating how to handle "password":. -

The `“pac-file”` property

  “pac-file”                 gchar *

UTF-8 encoded file path containing PAC for EAP-FAST.

Flags: Read / Write

Default value: NULL

The `“password”` property

  “password”                 gchar *

UTF-8 encoded password used for EAP authentication methods.

Flags: Read / Write

Default value: NULL

The `“password-flags”` property

  “password-flags”           guint

Flags indicating how to handle the 802.1x password.

Flags: Read / Write

Allowed values: <= 7

Default value: 0

The `"password-raw"` property

  "password-raw"             GArray_guchar_*       : Read / Write

-Password used for EAP authentication methods delivered as a -UTF-8-encoded array of bytes. If both "password" -and "password-raw" are specified, -"password" is preferred. -

The `“password-raw”` property

  “password-raw”             GArray_guchar_ *

Password used for EAP authentication methods, given as a byte array to allow passwords in other encodings than UTF-8 to be used. If both 'password' and 'password-raw' are given, 'password' is preferred.

Flags: Read / Write

The `"password-raw-flags"` property

  "password-raw-flags"       guint                 : Read / Write

-Flags indicating how to handle "password-raw":. -

The `“password-raw-flags”` property

  “password-raw-flags”       guint

Flags indicating how to handle the 802.1x password byte array.

Flags: Read / Write

Allowed values: <= 7

Default value: 0

The `"phase1-fast-provisioning"` property

  "phase1-fast-provisioning" gchar*                : Read / Write

-Enables or disables in-line provisioning of EAP-FAST credentials when -FAST is specified as the EAP method in the "eap" property. -Recognized values are "0" (disabled), "1" (allow unauthenticated -provisioning), "2" (allow authenticated provisioning), and "3" (allow -both authenticated and unauthenticated provisioning). See the -wpa_supplicant documentation for more details. -

The `“phase1-fast-provisioning”` property

  “phase1-fast-provisioning” gchar *

Enables or disables in-line provisioning of EAP-FAST credentials when FAST is specified as the EAP method in the #NMSetting8021x:eap property. Allowed values are '0' (disabled), '1' (allow unauthenticated provisioning), '2' (allow authenticated provisioning), and '3' (allow both authenticated and unauthenticated provisioning). See the wpa_supplicant documentation for more details.

Flags: Read / Write

Default value: NULL

The `"phase1-peaplabel"` property

  "phase1-peaplabel"         gchar*                : Read / Write

-Forces use of the new PEAP label during key derivation. Some RADIUS -servers may require forcing the new PEAP label to interoperate with -PEAPv1. Set to "1" to force use of the new PEAP label. See the -wpa_supplicant documentation for more details. -

The `“phase1-peaplabel”` property

  “phase1-peaplabel”         gchar *

Forces use of the new PEAP label during key derivation. Some RADIUS servers may require forcing the new PEAP label to interoperate with PEAPv1. Set to '1' to force use of the new PEAP label. See the wpa_supplicant documentation for more details.

Flags: Read / Write

Default value: NULL

The `"phase1-peapver"` property

  "phase1-peapver"           gchar*                : Read / Write

-Forces which PEAP version is used when PEAP is set as the EAP method in -the "eap" property. When unset, the version reported by -the server will be used. Sometimes when using older RADIUS servers, it -is necessary to force the client to use a particular PEAP version. To do -so, this property may be set to "0" or "1" to force that specific PEAP -version. -

The `“phase1-peapver”` property

  “phase1-peapver”           gchar *

Forces which PEAP version is used when PEAP is set as the EAP method in 'eap' property. When unset, the version reported by the server will be used. Sometimes when using older RADIUS servers, it is necessary to force the client to use a particular PEAP version. To do so, this property may be set to '0' or '1' to force that specific PEAP version.

Flags: Read / Write

Default value: NULL

The `"phase2-altsubject-matches"` property

  "phase2-altsubject-matches" GSList_gchararray_*   : Read / Write

-List of strings to be matched against the altSubjectName of the -certificate presented by the authentication server during the -inner "phase 2" authentication. If the list is empty, no -verification of the server certificate's altSubjectName is -performed. -

The `“phase2-altsubject-matches”` property

  “phase2-altsubject-matches” GSList_gchararray_ *

List of strings to be matched against List of strings to be matched against the altSubjectName of the certificate presented by the authentication server during the inner 'phase 2' authentication. If the list is empty, no verification of the server certificate's altSubjectName is performed.

Flags: Read / Write

The `"phase2-auth"` property

  "phase2-auth"              gchar*                : Read / Write

-Specifies the allowed "phase 2" inner non-EAP authentication methods when -an EAP method that uses an inner TLS tunnel is specified in the -"eap" property. Recognized non-EAP phase2 methods are -"pap", "chap", "mschap", "mschapv2", "gtc", "otp", "md5", and "tls". -Each 'phase 2' inner method requires specific parameters for successful -authentication; see the wpa_supplicant documentation for more details. -

The `“phase2-auth”` property

  “phase2-auth”              gchar *

Specifies the allowed 'phase 2' inner non-EAP authentication methods when an EAP method that uses an inner TLS tunnel is specified in the 'eap' property. Recognized non-EAP phase2 methods are 'pap', 'chap', 'mschap', 'mschapv2', 'gtc', 'otp', 'md5', and 'tls'. Each 'phase 2' inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details.

Flags: Read / Write

Default value: NULL

The `"phase2-autheap"` property

  "phase2-autheap"           gchar*                : Read / Write

-Specifies the allowed "phase 2" inner EAP-based authentication methods -when an EAP method that uses an inner TLS tunnel is specified in the -"eap" property. Recognized EAP-based phase2 methods are -"md5", "mschapv2", "otp", "gtc", and "tls". Each 'phase 2' inner method -requires specific parameters for successful authentication; see the -wpa_supplicant documentation for more details. -

The `“phase2-autheap”` property

  “phase2-autheap”           gchar *

Specifies the allowed 'phase 2' inner EAP-based authentication methods when an EAP method that uses an inner TLS tunnel is specified in the 'eap' property. Recognized EAP-based 'phase 2' methods are 'md5', 'mschapv2', 'otp', 'gtc', and 'tls'. Each 'phase 2' inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details.

Flags: Read / Write

Default value: NULL

The `"phase2-ca-cert"` property

  "phase2-ca-cert"           GArray_guchar_*       : Read / Write

-Contains the CA certificate if used by the EAP method specified in the -"phase2-auth" or "phase2-autheap" properties. -Setting this property directly is discouraged; use the -nm_setting_802_1x_set_phase2_ca_cert() function instead. -

The `“phase2-ca-cert”` property

  “phase2-ca-cert”           GArray_guchar_ *

Contains the 'phase 2' CA certificate if used by the EAP method specified in the 'phase2-auth' or 'phase2-autheap' properties. Certificate data is specified using a 'scheme'; two are currentlysupported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string 'file://' and ending with a terminating NULL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.

Flags: Read / Write

The `"phase2-ca-path"` property

  "phase2-ca-path"           gchar*                : Read / Write

-UTF-8 encoded path to a directory containing PEM or DER formatted -certificates to be added to the verification chain in addition to the -certificate specified in the "phase2-ca-cert" property. -

The `“phase2-ca-path”` property

  “phase2-ca-path”           gchar *

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the 'phase2-ca-cert' property.

Flags: Read / Write

Default value: NULL

The `"phase2-client-cert"` property

  "phase2-client-cert"       GArray_guchar_*       : Read / Write

-Contains the client certificate if used by the EAP method specified in -the "phase2-auth" or "phase2-autheap" -properties. Setting this property directly is discouraged; use the -nm_setting_802_1x_set_phase2_client_cert() function instead. -

The `“phase2-client-cert”` property

  “phase2-client-cert”       GArray_guchar_ *

Contains the 'phase 2' client certificate if used by the EAP method specified in the 'phase2-auth' or 'phase2-autheap' properties. Certificate data is specified using a 'scheme'; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string 'file://' and ending with a terminating NULL byte.

Flags: Read / Write

The `"phase2-private-key"` property

  "phase2-private-key"       GArray_guchar_*       : Read / Write

-Private key data used by "phase 2" inner authentication methods. -

-Contains the "phase 2" inner private key if the "phase2-auth" -or "phase2-autheap" property is set to 'tls'. Setting this -property directly is discouraged; use the -nm_setting_802_1x_set_phase2_private_key() function instead. -

The `“phase2-private-key”` property

  “phase2-private-key”       GArray_guchar_ *

Contains the 'phase 2' inner private key when the 'phase2-auth' or 'phase2-autheap' property is set to 'tls'. Key data is specified using a 'scheme'; two are currently supported: blob and path. When using the blob scheme and private keys, this property should be set to the key's encrypted PEM encoded data. When using private keys with the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string 'file://' and ending with a terminating NULL byte. When using PKCS#12 format private keys and the blob scheme, this property should be set to the PKCS#12 data and the 'phase2-private-key-password' property must be set to password used to decrypt the PKCS#12 certificate and key. When using PKCS#12 files and the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string 'file://' and and ending with a terminating NULL byte, and as with the blob scheme the 'phase2-private-key-password' property must be set to the password used to decode the PKCS#12 private key and certificate.

Flags: Read / Write

The `"phase2-private-key-password"` property

  "phase2-private-key-password" gchar*                : Read / Write

-The password used to decrypt the private key specified in -"phase2-private-key" when the private key either uses the -path scheme, or if the private key is a PKCS12 format key. Setting this -property directly is not generally necessary except when returning -secrets to NetworkManager; it is generally set automatically when setting -the private key by the nm_setting_802_1x_set_phase2_private_key() function. -

The `“phase2-private-key-password”` property

  “phase2-private-key-password” gchar *

The password used to decrypt the 'phase 2' private key specified in the 'private-key' property when the phase2 private key either uses the path scheme, or if the phase2 private key is a PKCS#12 format key.

Flags: Read / Write

Default value: NULL

The `"phase2-private-key-password-flags"` property

  "phase2-private-key-password-flags" guint                 : Read / Write

-Flags indicating how to handle "phase2-private-key-password":. -

The `“phase2-private-key-password-flags”` property

  “phase2-private-key-password-flags” guint

Flags indicating how to handle the 802.1x phase2 private key password.

Flags: Read / Write

Allowed values: <= 7

Default value: 0

The `"phase2-subject-match"` property

  "phase2-subject-match"     gchar*                : Read / Write

-Substring to be matched against the subject of the certificate -presented by the authentication server during the inner "phase -2" authentication. When unset, no verification of the -authentication server certificate's subject is performed. -

The `“phase2-subject-match”` property

  “phase2-subject-match”     gchar *

Substring to be matched against the subject of the certificate presented by the authentication server during the inner 'phase2' authentication. When unset, no verification of the authentication server certificate's subject is performed.

Flags: Read / Write

Default value: NULL

The `"pin"` property

  "pin"                      gchar*                : Read / Write

-PIN used for EAP authentication methods. -

The `“pin”` property

  “pin”                      gchar *

PIN used for EAP authentication methods.

Flags: Read / Write

Default value: NULL

The `"pin-flags"` property

  "pin-flags"                guint                 : Read / Write

-Flags indicating how to handle "pin":. -

The `“pin-flags”` property

  “pin-flags”                guint

Flags indicating how to handle the 802.1x PIN.

Flags: Read / Write

Allowed values: <= 7

Default value: 0

The `"private-key"` property

  "private-key"              GArray_guchar_*       : Read / Write

-Contains the private key if the "eap" property is set to -'tls'. Setting this property directly is discouraged; use the -nm_setting_802_1x_set_private_key() function instead. -

-WARNING: "private-key" is not a "secret" property, and thus -unencrypted private key data using the BLOB scheme may be readable by -unprivileged users. Private keys should always be encrypted with a -private key password to prevent unauthorized access to unencrypted -private key data. -

The `“private-key”` property

  “private-key”              GArray_guchar_ *

Contains the private key when the 'eap' property is set to 'tls'. Key data is specified using a 'scheme'; two are currently supported: blob and path. When using the blob scheme and private keys, this property should be set to the key's encrypted PEM encoded data. When using private keys with the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string 'file://' and ending with a terminating NULL byte. When using PKCS#12 format private keys and the blob scheme, this property should be set to the PKCS#12 data and the 'private-key-password' property must be set to password used to decrypt the PKCS#12 certificate and key. When using PKCS#12 files and the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string 'file://' and and ending with a terminating NULL byte, and as with the blob scheme the 'private-key-password' property must be set to the password used to decode the PKCS#12 private key and certificate.

Flags: Read / Write

The `"private-key-password"` property

  "private-key-password"     gchar*                : Read / Write

-The password used to decrypt the private key specified in -"private-key" when the private key either uses the path -scheme, or if the private key is a PKCS12 format key. Setting this -property directly is not generally necessary except when returning -secrets to NetworkManager; it is generally set automatically when setting -the private key by the nm_setting_802_1x_set_private_key() function. -

The `“private-key-password”` property

  “private-key-password”     gchar *

The password used to decrypt the private key specified in the 'private-key' property when the private key either uses the path scheme, or if the private key is a PKCS#12 format key.

Flags: Read / Write

Default value: NULL

The `"private-key-password-flags"` property

  "private-key-password-flags" guint                 : Read / Write

-Flags indicating how to handle "private-key-password":. -

The `“private-key-password-flags”` property

  “private-key-password-flags” guint

Flags indicating how to handle the 802.1x private key password.

Flags: Read / Write

Allowed values: <= 7

Default value: 0

The `"subject-match"` property

  "subject-match"            gchar*                : Read / Write

-Substring to be matched against the subject of the certificate -presented by the authentication server. When unset, no -verification of the authentication server certificate's subject -is performed. -

The `“subject-match”` property

  “subject-match”            gchar *

Substring to be matched against the subject of the certificate presented by the authentication server. When unset, no verification of the authentication server certificate's subject is performed.

Flags: Read / Write

Default value: NULL

The `"system-ca-certs"` property

  "system-ca-certs"          gboolean              : Read / Write / Construct

-When TRUE, overrides "ca-path" and -"phase2-ca-path" properties using the system CA directory -specified at configure time with the --system-ca-path switch. The -certificates in this directory are added to the verification chain in -addition to any certificates specified by the "ca-cert" -and "phase2-ca-cert" properties. -

The `“system-ca-certs”` property

  “system-ca-certs”          gboolean

When TRUE, overrides 'ca-path' and 'phase2-ca-path' properties using the system CA directory specified at configure time with the --system-ca-path switch. The certificates in this directory are added to the verification chain in addition to any certificates specified by the 'ca-cert' and 'phase2-ca-cert' properties.

Flags: Read / Write / Construct

Default value: FALSE

			libnm-util Reference Manual
-Top - \| - Description - \| - Object Hierarchy - \| - Properties -

setting	the NMSetting8021x
i	the index of the EAP method name to return

setting	the NMSetting8021x
eap	the name of the EAP method to allow for this connection

setting	the NMSetting8021x
i	the index of the EAP method to remove

`setting` :	the NMSetting8021x -
`i` :	the index of the EAP method name to return	setting	the NMSettingConnection
Returns :	the name of the allowed EAP method at index `i` -	i	the zero-based index of the array of altSubjectName matches

`setting` :	the NMSetting8021x -
`eap` :	the name of the EAP method to allow for this connection	setting	the NMSetting8021x
Returns :	TRUE if the EAP method was successfully added, FALSE if it was -not a valid method or if it was already allowed.	altsubject_match	the altSubjectName to allow for this connection

`setting` :	the NMSettingConnection -
`i` :	the zero-based index of the array of altSubjectName matches	setting	the NMSettingConnection
Returns :	the altSubjectName match at index `i` -	i	the zero-based index of the array of "phase 2" altSubjectName matches

`setting` :	the NMSetting8021x -
`altsubject_match` :	the altSubjectName to allow for this connection	setting	the NMSetting8021x
Returns :	TRUE if the alternative subject name match was -successfully added, FALSE if it was already allowed.	phase2_altsubject_match	the "phase 2" altSubjectName to allow for this +connection

`setting` :	the NMSetting8021x -
`cert_path` :	when `scheme` is set to either `NM_SETTING_802_1X_CK_SCHEME_PATH` -or `NM_SETTING_802_1X_CK_SCHEME_BLOB`, pass the path of the "phase2" CA -certificate file (PEM or DER format). The path must be UTF-8 encoded; use -`g_filename_to_utf8()` to convert if needed. Passing `NULL` with any `scheme` -clears the "phase2" CA certificate.
`scheme` :	desired storage scheme for the certificate
`out_format` :	on successful return, the type of the certificate added
`error` :	on unsuccessful return, an error
Returns :	TRUE if the operation succeeded, FALSE if it was unsuccessful
setting	the NMSetting8021x

`setting` :	the NMSetting8021x -	key_path	when `scheme` +is set to either `NM_SETTING_802_1X_CK_SCHEME_PATH` or +`NM_SETTING_802_1X_CK_SCHEME_BLOB`, pass the path of the private key file +(PEM, DER, or PKCS12 format). The path must be UTF-8 encoded; use +`g_filename_to_utf8()` to convert if needed. Passing `NULL` with any `scheme` +clears the private key.
Returns :	the number of phase2-altsubject-matches entries.	password	password used to decrypt the private key, or `NULL` if the password +is unknown. If the password is given but fails to decrypt the private key, +an error is returned.

`setting` :	the NMSettingConnection -	scheme	desired storage scheme for the private key
`i` :	the zero-based index of the array of "phase 2" altSubjectName matches	out_format	on successful return, the type of the private key added
Returns :	the "phase 2" altSubjectName match at index `i` -	error	on unsuccessful return, an error

`setting` :	the NMSetting8021x -
`phase2_altsubject_match` :	the "phase 2" altSubjectName to allow for this -connection
Returns :	TRUE if the "phase 2" alternative subject name match was -successfully added, FALSE if it was already allowed.
setting	the NMSetting8021x

`setting` :	the NMSetting8021x +	NM_SETTING_802_1X_CK_FORMAT_UNKNOWN	+ unknown file format
Returns :	the NMSettingSecretFlags pertaining to the -"password-raw" +	NM_SETTING_802_1X_CK_FORMAT_X509	+ file contains an X.509 format certificate

`setting` :	the NMSetting8021x +	NM_SETTING_802_1X_CK_FORMAT_RAW_KEY	+ file contains an old-style OpenSSL PEM +or DER private key
Returns :	the PIN used by the authentication method, if any, as specified -by the "pin" property	NM_SETTING_802_1X_CK_FORMAT_PKCS12	+ file contains a PKCS12 certificate +and private key +

`setting` :	the NMSetting8021x +	NM_SETTING_802_1X_CK_SCHEME_UNKNOWN	+ unknown certificate or private key +scheme +
NM_SETTING_802_1X_CK_SCHEME_BLOB	+ certificate or key is stored as the raw +item data
Returns :	the NMSettingSecretFlags pertaining to the -"pin" +	NM_SETTING_802_1X_CK_SCHEME_PATH	+ certificate or key is stored as a path +to a file containing the certificate or key data

`setting` :	the NMSetting8021x +	NM_SETTING_802_1X_ERROR_UNKNOWN	+ unknown or unclassified error +
NM_SETTING_802_1X_ERROR_INVALID_PROPERTY	+ the property was invalid
Returns :	scheme used to store the private key (blob or path)	NM_SETTING_802_1X_ERROR_MISSING_PROPERTY	+ the property was missing and is +required +

`setting` :	the NMSetting8021x -
`key_path` :	when `scheme` is set to either `NM_SETTING_802_1X_CK_SCHEME_PATH` or -`NM_SETTING_802_1X_CK_SCHEME_BLOB`, pass the path of the private key file -(PEM, DER, or PKCS12 format). The path must be UTF-8 encoded; use -`g_filename_to_utf8()` to convert if needed. Passing `NULL` with any `scheme` -clears the private key.
`password` :	password used to decrypt the private key, or `NULL` if the password -is unknown. If the password is given but fails to decrypt the private key, -an error is returned.
`scheme` :	desired storage scheme for the private key
`out_format` :	on successful return, the type of the private key added
`error` :	on unsuccessful return, an error
Returns :	TRUE if the operation succeeded, FALSE if it was unsuccessful