From 263bf4c0c89bb88dc995acd9a6a2de9095fbd461 Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Tue, 23 Aug 2011 19:16:47 +0200 Subject: Imported Upstream version 0.9.0 --- docs/libnm-util/html/NMSetting8021x.html | 457 ++++++++++++++++++++++++++++++- 1 file changed, 442 insertions(+), 15 deletions(-) (limited to 'docs/libnm-util/html/NMSetting8021x.html') diff --git a/docs/libnm-util/html/NMSetting8021x.html b/docs/libnm-util/html/NMSetting8021x.html index c9e533b5..1d7216b1 100644 --- a/docs/libnm-util/html/NMSetting8021x.html +++ b/docs/libnm-util/html/NMSetting8021x.html @@ -56,6 +56,8 @@ enum NM_SETTING_802_1X_ANONYMOUS_IDENTITY #define NM_SETTING_802_1X_CA_CERT #define NM_SETTING_802_1X_CA_PATH +#define NM_SETTING_802_1X_SUBJECT_MATCH +#define NM_SETTING_802_1X_ALTSUBJECT_MATCHES #define NM_SETTING_802_1X_CLIENT_CERT #define NM_SETTING_802_1X_PHASE1_PEAPVER #define NM_SETTING_802_1X_PHASE1_PEAPLABEL @@ -64,6 +66,8 @@ enum NM_SETTING_802_1X_PHASE2_AUTHEAP #define NM_SETTING_802_1X_PHASE2_CA_CERT #define NM_SETTING_802_1X_PHASE2_CA_PATH +#define NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH +#define NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES #define NM_SETTING_802_1X_PHASE2_CLIENT_CERT #define NM_SETTING_802_1X_PASSWORD #define NM_SETTING_802_1X_PASSWORD_FLAGS @@ -108,6 +112,20 @@ const char * NMSetting8021xCKScheme scheme, NMSetting8021xCKFormat *out_format, GError **error); +const char * nm_setting_802_1x_get_subject_match (NMSetting8021x *setting); +guint32 nm_setting_802_1x_get_num_altsubject_matches + (NMSetting8021x *setting); +const char * nm_setting_802_1x_get_altsubject_match + (NMSetting8021x *setting, + guint32 i); +gboolean nm_setting_802_1x_add_altsubject_match + (NMSetting8021x *setting, + const char *altsubject_match); +void nm_setting_802_1x_remove_altsubject_match + (NMSetting8021x *setting, + guint32 i); +void nm_setting_802_1x_clear_altsubject_matches + (NMSetting8021x *setting); NMSetting8021xCKScheme nm_setting_802_1x_get_client_cert_scheme (NMSetting8021x *setting); const GByteArray * nm_setting_802_1x_get_client_cert_blob @@ -140,6 +158,21 @@ const char * NMSetting8021xCKScheme scheme, NMSetting8021xCKFormat *out_format, GError **error); +const char * nm_setting_802_1x_get_phase2_subject_match + (NMSetting8021x *setting); +guint32 nm_setting_802_1x_get_num_phase2_altsubject_matches + (NMSetting8021x *setting); +const char * nm_setting_802_1x_get_phase2_altsubject_match + (NMSetting8021x *setting, + guint32 i); +gboolean nm_setting_802_1x_add_phase2_altsubject_match + (NMSetting8021x *setting, + const char *phase2_altsubject_match); +void nm_setting_802_1x_remove_phase2_altsubject_match + (NMSetting8021x *setting, + guint32 i); +void nm_setting_802_1x_clear_phase2_altsubject_matches + (NMSetting8021x *setting); NMSetting8021xCKScheme nm_setting_802_1x_get_phase2_client_cert_scheme (NMSetting8021x *setting); const GByteArray * nm_setting_802_1x_get_phase2_client_cert_blob @@ -211,6 +244,7 @@ const char *

Properties

+  "altsubject-matches"       GSList_gchararray_*   : Read / Write
   "anonymous-identity"       gchar*                : Read / Write
   "ca-cert"                  GArray_guchar_*       : Read / Write
   "ca-path"                  gchar*                : Read / Write
@@ -222,6 +256,7 @@ const char *            phase1-fast-provisioning" gchar*                : Read / Write
   "phase1-peaplabel"         gchar*                : Read / Write
   "phase1-peapver"           gchar*                : Read / Write
+  "phase2-altsubject-matches" GSList_gchararray_*   : Read / Write
   "phase2-auth"              gchar*                : Read / Write
   "phase2-autheap"           gchar*                : Read / Write
   "phase2-ca-cert"           GArray_guchar_*       : Read / Write
@@ -230,9 +265,11 @@ const char *            phase2-private-key"       GArray_guchar_*       : Read / Write
   "phase2-private-key-password" gchar*                : Read / Write
   "phase2-private-key-password-flags" guint                 : Read / Write
+  "phase2-subject-match"     gchar*                : Read / Write
   "private-key"              GArray_guchar_*       : Read / Write
   "private-key-password"     gchar*                : Read / Write
   "private-key-password-flags" guint                 : Read / Write
+  "subject-match"            gchar*                : Read / Write
   "system-ca-certs"          gboolean              : Read / Write / Construct
@@ -359,15 +396,33 @@ to a file containing the certificate or key data

enum NMSetting8021xError

-
typedef enum
-{
+
typedef enum {
 	NM_SETTING_802_1X_ERROR_UNKNOWN = 0,
 	NM_SETTING_802_1X_ERROR_INVALID_PROPERTY,
 	NM_SETTING_802_1X_ERROR_MISSING_PROPERTY
 } NMSetting8021xError;
 

-

-

+

++
+
+
+
+
+
+
+
+
+
+
+
+
+
+


NM_SETTING_802_1X_ERROR_UNKNOWN
unknown or unclassified error
+
NM_SETTING_802_1X_ERROR_INVALID_PROPERTY
the property was invalid
+
NM_SETTING_802_1X_ERROR_MISSING_PROPERTY
the property was missing and is
+required
+
@@ -442,6 +497,22 @@ Registers an error quark for +

NM_SETTING_802_1X_SUBJECT_MATCH

+
#define NM_SETTING_802_1X_SUBJECT_MATCH "subject-match"
+
+

+

+
+
+
+

NM_SETTING_802_1X_ALTSUBJECT_MATCHES

+
#define NM_SETTING_802_1X_ALTSUBJECT_MATCHES "altsubject-matches"
+
+

+

+
+
+

NM_SETTING_802_1X_CLIENT_CERT

#define NM_SETTING_802_1X_CLIENT_CERT "client-cert"
@@ -506,6 +577,22 @@ Registers an error quark for +

NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH

+
#define NM_SETTING_802_1X_PHASE2_SUBJECT_MATCH "phase2-subject-match"
+
+

+

+
+
+
+

NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES

+
#define NM_SETTING_802_1X_PHASE2_ALTSUBJECT_MATCHES "phase2-altsubject-matches"
+
+

+

+
+
+

NM_SETTING_802_1X_PHASE2_CLIENT_CERT

#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT "phase2-client-cert"
@@ -1031,6 +1118,153 @@ clears the CA certificate.
+

nm_setting_802_1x_get_subject_match ()

+
const char *        nm_setting_802_1x_get_subject_match (NMSetting8021x *setting);
+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

Returns :

the "subject-match" property. This is the +substring to be matched against the subject of the authentication +server certificate, or NULL no subject verification is to be +performed.
+
+
+
+

nm_setting_802_1x_get_num_altsubject_matches ()

+
guint32             nm_setting_802_1x_get_num_altsubject_matches
+                                                        (NMSetting8021x *setting);
+

+Returns the number of entries in the +"altsubject-matches" property of this setting. +

+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

Returns :

the number of altsubject-matches entries.
+
+
+
+

nm_setting_802_1x_get_altsubject_match ()

+
const char *        nm_setting_802_1x_get_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         guint32 i);
+

+Returns the altSubjectName match at index i. +

+
++ + + + + + + + + + + + + + +

setting :

the NMSettingConnection +

i :

the zero-based index of the array of altSubjectName matches

Returns :

the altSubjectName match at index i +
+
+
+
+

nm_setting_802_1x_add_altsubject_match ()

+
gboolean            nm_setting_802_1x_add_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         const char *altsubject_match);
+

+Adds an allowed alternate subject name match. Until at least one +match is added, the altSubjectName of the remote authentication +server is not verified. +

+
++ + + + + + + + + + + + + + +

setting :

the NMSetting8021x +

altsubject_match :

the altSubjectName to allow for this connection

Returns :

TRUE if the alternative subject name match was +successfully added, FALSE if it was already allowed.
+
+
+
+

nm_setting_802_1x_remove_altsubject_match ()

+
void                nm_setting_802_1x_remove_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         guint32 i);
+

+Removes the allowed altSubjectName at the specified index. +

+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

i :

the index of the altSubjectName match to remove
+
+
+
+

nm_setting_802_1x_clear_altsubject_matches ()

+
void                nm_setting_802_1x_clear_altsubject_matches
+                                                        (NMSetting8021x *setting);
+

+Clears all altSubjectName matches. +

+
++ + + + +

setting :

the NMSetting8021x +
+
+
+

nm_setting_802_1x_get_client_cert_scheme ()

NMSetting8021xCKScheme  nm_setting_802_1x_get_client_cert_scheme
                                                         (NMSetting8021x *setting);
@@ -1401,6 +1635,155 @@ clears the "phase2" CA certificate.
+

nm_setting_802_1x_get_phase2_subject_match ()

+
const char *        nm_setting_802_1x_get_phase2_subject_match
+                                                        (NMSetting8021x *setting);
+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

Returns :

the "phase2-subject-match" property. This is +the substring to be matched against the subject of the "phase 2" +authentication server certificate, or NULL no subject verification +is to be performed.
+
+
+
+

nm_setting_802_1x_get_num_phase2_altsubject_matches ()

+
guint32             nm_setting_802_1x_get_num_phase2_altsubject_matches
+                                                        (NMSetting8021x *setting);
+

+Returns the number of entries in the +"phase2-altsubject-matches" property of this setting. +

+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

Returns :

the number of phase2-altsubject-matches entries.
+
+
+
+

nm_setting_802_1x_get_phase2_altsubject_match ()

+
const char *        nm_setting_802_1x_get_phase2_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         guint32 i);
+

+Returns the "phase 2" altSubjectName match at index i. +

+
++ + + + + + + + + + + + + + +

setting :

the NMSettingConnection +

i :

the zero-based index of the array of "phase 2" altSubjectName matches

Returns :

the "phase 2" altSubjectName match at index i +
+
+
+
+

nm_setting_802_1x_add_phase2_altsubject_match ()

+
gboolean            nm_setting_802_1x_add_phase2_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         const char *phase2_altsubject_match);
+

+Adds an allowed alternate subject name match for "phase 2". Until +at least one match is added, the altSubjectName of the "phase 2" +remote authentication server is not verified. +

+
++ + + + + + + + + + + + + + +

setting :

the NMSetting8021x +

phase2_altsubject_match :

the "phase 2" altSubjectName to allow for this +connection

Returns :

TRUE if the "phase 2" alternative subject name match was +successfully added, FALSE if it was already allowed.
+
+
+
+

nm_setting_802_1x_remove_phase2_altsubject_match ()

+
void                nm_setting_802_1x_remove_phase2_altsubject_match
+                                                        (NMSetting8021x *setting,
+                                                         guint32 i);
+

+Removes the allowed "phase 2" altSubjectName at the specified index. +

+
++ + + + + + + + + + +

setting :

the NMSetting8021x +

i :

the index of the "phase 2" altSubjectName match to remove
+
+
+
+

nm_setting_802_1x_clear_phase2_altsubject_matches ()

+
void                nm_setting_802_1x_clear_phase2_altsubject_matches
+                                                        (NMSetting8021x *setting);
+

+Clears all "phase 2" altSubjectName matches. +

+
++ + + + +

setting :

the NMSetting8021x +
+
+
+

nm_setting_802_1x_get_phase2_client_cert_scheme ()

NMSetting8021xCKScheme  nm_setting_802_1x_get_phase2_client_cert_scheme
                                                         (NMSetting8021x *setting);
@@ -1748,7 +2131,7 @@ clears the private key.

password :

-password used to decrypt the private key, or NULL if the password +password used to decrypt the private key, or NULL if the password is unknown. If the password is given but fails to decrypt the private key, an error is returned. @@ -1787,8 +2170,7 @@ an error is returned.

Returns :

the private key password used to decrypt the private key if -previously set with nm_setting_802_1x_set_private_key_from_file(), -nm_setting_802_1x_set_private_key_path(), or the +previously set with nm_setting_802_1x_set_private_key(), or the "private-key-password" property. @@ -1973,7 +2355,7 @@ use password :

-password used to decrypt the private key, or NULL if the password +password used to decrypt the private key, or NULL if the password is unknown. If the password is given but fails to decrypt the private key, an error is returned. @@ -2012,8 +2394,7 @@ an error is returned.

Returns :

the private key password used to decrypt the private key if -previously set with nm_setting_802_1x_set_phase2_private_key_from_file(), -nm_setting_802_1x_set_phase2_private_key_path(), or the +previously set with nm_setting_802_1x_set_phase2_private_key() or the "phase2-private-key-password" property. @@ -2066,6 +2447,17 @@ previously set with nm_setting_802_1x_set_phase2_private_

Property Details

+

The "altsubject-matches" property

+
  "altsubject-matches"       GSList_gchararray_*   : Read / Write
+

+List of strings to be matched against the altSubjectName of the +certificate presented by the authentication server. If the list +is empty, no verification of the server certificate's +altSubjectName is performed. +

+
+
+

The "anonymous-identity" property

  "anonymous-identity"       gchar*                : Read / Write

@@ -2189,6 +2581,18 @@ version.

+

The "phase2-altsubject-matches" property

+
  "phase2-altsubject-matches" GSList_gchararray_*   : Read / Write
+

+List of strings to be matched against the altSubjectName of the +certificate presented by the authentication server during the +inner "phase 2" authentication. If the list is empty, no +verification of the server certificate's altSubjectName is +performed. +

+
+
+

The "phase2-auth" property

  "phase2-auth"              gchar*                : Read / Write

@@ -2256,8 +2660,8 @@ properties. Setting this property directly is discouraged; use the Private key data used by "phase 2" inner authentication methods.

-Contains the "phase 2" inner private key if the "auth" or -"phase2-autheap" property is set to 'tls'. Setting this +Contains the "phase 2" inner private key if the "phase2-auth" +or "phase2-autheap" property is set to 'tls'. Setting this property directly is discouraged; use the nm_setting_802_1x_set_phase2_private_key() function instead.

@@ -2288,6 +2692,18 @@ Flags indicating how to handle +

The "phase2-subject-match" property

+
  "phase2-subject-match"     gchar*                : Read / Write
+

+Substring to be matched against the subject of the certificate +presented by the authentication server during the inner "phase +2" authentication. When unset, no verification of the +authentication server certificate's subject is performed. +

+

Default value: NULL

+
+
+

The "private-key" property

  "private-key"              GArray_guchar_*       : Read / Write

@@ -2329,6 +2745,18 @@ Flags indicating how to handle +

The "subject-match" property

+
  "subject-match"            gchar*                : Read / Write
+

+Substring to be matched against the subject of the certificate +presented by the authentication server. When unset, no +verification of the authentication server certificate's subject +is performed. +

+

Default value: NULL

+
+
+

The "system-ca-certs" property

  "system-ca-certs"          gboolean              : Read / Write / Construct

@@ -2336,9 +2764,8 @@ When TRUE, overrides "phase2-ca-path" properties using the system CA directory specified at configure time with the --system-ca-path switch. The certificates in this directory are added to the verification chain in -addition to any certificates specified by the "ca-cert", -"ca-cert-path", "phase2-ca-cert" and -"phase2-ca-cert-path" properties. +addition to any certificates specified by the "ca-cert" +and "phase2-ca-cert" properties.

Default value: FALSE

-- cgit 1.3.0-6-gf8a5