From 34bb501be08aa2b313d88e67d6e0a7e0a3f9cfa6 Mon Sep 17 00:00:00 2001
From: Michael Biebl Determines and verifies the blob type.
When setting certificate properties of NMSetting8021x
the blob must be not UNKNOWN (or NULL).
-guint32
+guint32
nm_setting_802_1x_get_num_eap_methods ()
@@ -73,7 +73,7 @@
-gboolean
+gboolean
nm_setting_802_1x_add_eap_method ()
@@ -89,7 +89,7 @@
-gboolean
+gboolean
nm_setting_802_1x_remove_eap_method_by_value ()
@@ -126,7 +126,7 @@
-gboolean
+gboolean
nm_setting_802_1x_get_system_ca_certs ()
@@ -156,7 +156,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_ca_cert_blob ()
@@ -178,7 +178,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_ca_cert ()
@@ -208,7 +208,7 @@
-guint32
+guint32
nm_setting_802_1x_get_num_altsubject_matches ()
@@ -223,7 +223,7 @@
-gboolean
+gboolean
nm_setting_802_1x_add_altsubject_match ()
@@ -239,7 +239,7 @@
-gboolean
+gboolean
nm_setting_802_1x_remove_altsubject_match_by_value ()
@@ -277,7 +277,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_client_cert_blob ()
@@ -299,7 +299,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_client_cert ()
@@ -365,7 +365,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_ca_cert_blob ()
@@ -387,7 +387,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_ca_cert ()
@@ -417,7 +417,7 @@
-guint32
+guint32
nm_setting_802_1x_get_num_phase2_altsubject_matches ()
@@ -432,7 +432,7 @@
-gboolean
+gboolean
nm_setting_802_1x_add_phase2_altsubject_match ()
@@ -448,7 +448,7 @@
-gboolean
+gboolean
nm_setting_802_1x_remove_phase2_altsubject_match_by_value ()
@@ -486,7 +486,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_client_cert_blob ()
@@ -508,7 +508,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_client_cert ()
@@ -546,7 +546,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_password_raw ()
@@ -585,7 +585,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_private_key_blob ()
@@ -607,7 +607,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_private_key ()
@@ -646,7 +646,7 @@
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_private_key_blob ()
@@ -668,7 +668,7 @@
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_private_key ()
@@ -715,12 +715,19 @@
+
-gboolean
+gboolean
nm_setting_802_1x_get_optional ()
+
@@ -944,6 +951,10 @@
const char *
+
+
+nm_setting_802_1x_get_openssl_ciphers ()
+
+#define
NM_SETTING_802_1X_OPTIONAL
+
+
@@ -993,9 +1004,9 @@ nm_setting_802_1x_new (#define
+NM_SETTING_802_1X_OPENSSL_CIPHERS
+void
nm_setting_802_1x_check_cert_scheme ()
NMSetting8021xCKScheme
-nm_setting_802_1x_check_cert_scheme (
+nm_setting_802_1x_check_cert_scheme (gconstpointer pdata,
- gsize length,
- GError **error);gconstpointer pdata,
+ gsize length,
+ GError **error);
guint32 +guint32 nm_setting_802_1x_get_num_eap_methods (NMSetting8021x *setting);Returns the number of eap methods allowed for use when connecting to the network. Generally only one EAP method is used. Use the functions @@ -1068,7 +1079,7 @@ allowed EAP methods.
nm_setting_802_1x_get_eap_method ()
const char * nm_setting_802_1x_get_eap_method (+NMSetting8021x *setting, -guint32 i);guint32 i);
Returns the name of the allowed EAP method at index i
.
nm_setting_802_1x_add_eap_method ()
-gboolean
+gboolean
nm_setting_802_1x_add_eap_method (NMSetting8021x *setting,
const char *eap);
Adds an allowed EAP method. The setting is not valid until at least one
@@ -1132,7 +1143,7 @@ allowed EAP methods.
void nm_setting_802_1x_remove_eap_method (+NMSetting8021x *setting, -guint32 i);
guint32 i);
Removes the allowed EAP method at the specified index.
nm_setting_802_1x_remove_eap_method_by_value ()
-gboolean
+gboolean
nm_setting_802_1x_remove_eap_method_by_value
(NMSetting8021x *setting,
const char *eap);
@@ -1199,7 +1210,7 @@ nm_setting_802_1x_remove_eap_method_by_value
nm_setting_802_1x_get_system_ca_certs ()
-gboolean
+gboolean
nm_setting_802_1x_get_system_ca_certs (NMSetting8021x *setting);
Sets the “system-ca-certs” property. The
“ca-path” and “phase2-ca-path”
properties are ignored if the “system-ca-certs” property is
-TRUE, in which case a system-wide CA certificate directory specified at
+TRUE, in which case a system-wide CA certificate directory specified at
compile time (using the --system-ca-path configure option) is used in place
of these properties.
@@ -1335,7 +1346,7 @@ of these properties.
@@ -1430,7 +1441,7 @@ if
nm_setting_802_1x_get_ca_cert_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_ca_cert_blob (NMSetting8021x *setting);
Returns the CA certificate blob if the CA certificate is stored using the
NM_SETTING_802_1X_CK_SCHEME_BLOB scheme. Not all EAP methods use a
@@ -1525,12 +1536,12 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_ca_cert ()
-gboolean
+gboolean
nm_setting_802_1x_set_ca_cert (NMSetting8021x *setting,
const char *value,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Reads a certificate from disk and sets the “ca-cert” property
with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB
scheme, or with the path to the certificate file if using the
@@ -1555,7 +1566,7 @@ scheme, or with the path to the certificate file if using the
is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the CA certificate
file (PEM or DER format). The path must be UTF-8 encoded; use
-g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
+g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
clears the CA certificate.
@@ -1579,7 +1590,7 @@ clears the CA certificate.
Returns
the “subject-match” property. This is the
substring to be matched against the subject of the authentication
-server certificate, or NULL no subject verification is to be
+server certificate, or NULL no subject verification is to be
performed.
nm_setting_802_1x_get_num_altsubject_matches ()
-guint32
+guint32
nm_setting_802_1x_get_num_altsubject_matches
(NMSetting8021x *setting);
Returns the number of entries in the
@@ -1701,7 +1712,7 @@ nm_setting_802_1x_get_num_altsubject_matches
const char *
nm_setting_802_1x_get_altsubject_match
(NMSetting8021x *setting,
- guint32 i);
+ guint32 i);
Returns the altSubjectName match at index i
.
@@ -1735,7 +1746,7 @@ nm_setting_802_1x_get_altsubject_match
nm_setting_802_1x_add_altsubject_match ()
-gboolean
+gboolean
nm_setting_802_1x_add_altsubject_match
(NMSetting8021x *setting,
const char *altsubject_match);
@@ -1766,8 +1777,8 @@ server is not verified.
@@ -1776,7 +1787,7 @@ successfully added, void
nm_setting_802_1x_remove_altsubject_match
(NMSetting8021x *setting,
- guint32 i);
+ guint32 i);
Removes the allowed altSubjectName at the specified index.
Parameters
@@ -1804,7 +1815,7 @@ nm_setting_802_1x_remove_altsubject_match
nm_setting_802_1x_remove_altsubject_match_by_value ()
-gboolean
+gboolean
nm_setting_802_1x_remove_altsubject_match_by_value
(NMSetting8021x *setting,
const char *altsubject_match);
@@ -1834,8 +1845,8 @@ nm_setting_802_1x_remove_altsubject_match_by_value
@@ -1947,7 +1958,7 @@ if
nm_setting_802_1x_get_client_cert_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_client_cert_blob
(NMSetting8021x *setting);
Client certificates are used to identify the connecting client to the network
@@ -2038,12 +2049,12 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_client_cert ()
-gboolean
+gboolean
nm_setting_802_1x_set_client_cert (NMSetting8021x *setting,
const char *value,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Reads a certificate from disk and sets the “client-cert”
property with the raw certificate data if using the
NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate
@@ -2071,7 +2082,7 @@ authentication method.
is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the client
certificate file (PEM, DER, or PKCS#12 format). The path must be UTF-8
-encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with
+encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with
any scheme
clears the client certificate.
@@ -2096,7 +2107,7 @@ clears the client certificate.
@@ -2180,7 +2191,7 @@ nm_setting_802_1x_get_phase1_peapver (Returns
the "phase 1" PEAP version to be used when authenticating with
EAP-PEAP as contained in the “phase1-peapver” property. Valid
-values are NULL (unset), "0" (PEAP version 0), and "1" (PEAP version 1).
+values are NULL (unset), "0" (PEAP version 0), and "1" (PEAP version 1).
@@ -2208,7 +2219,7 @@ nm_setting_802_1x_get_phase1_peaplabel
Returns
whether the "phase 1" PEAP label is new-style or old-style, to be
used when authenticating with EAP-PEAP, as contained in the
-“phase1-peaplabel” property. Valid values are NULL (unset),
+“phase1-peaplabel” property. Valid values are NULL (unset),
"0" (use old-style label), and "1" (use new-style label). See the
wpa_supplicant documentation for more details.
@@ -2327,7 +2338,7 @@ use
nm_setting_802_1x_get_phase2_ca_cert_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_ca_cert_blob
(NMSetting8021x *setting);
Returns the "phase 2" CA certificate blob if the CA certificate is stored
@@ -2425,12 +2436,12 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_phase2_ca_cert ()
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_ca_cert (NMSetting8021x *setting,
const char *value,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Reads a certificate from disk and sets the “phase2-ca-cert”
property with the raw certificate data if using the
NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate
@@ -2455,7 +2466,7 @@ file if using the NM_SETTING_802_1X_CK_SCHEME_PATH
or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" CA
certificate file (PEM or DER format). The path must be UTF-8 encoded; use
-g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
+g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
clears the "phase2" CA certificate.
@@ -2479,7 +2490,7 @@ clears the "phase2" CA certificate.
@@ -2564,14 +2575,14 @@ nm_setting_802_1x_get_phase2_subject_match
Returns
the “phase2-subject-match” property. This is
the substring to be matched against the subject of the "phase 2"
-authentication server certificate, or NULL no subject verification
+authentication server certificate, or NULL no subject verification
is to be performed.
nm_setting_802_1x_get_num_phase2_altsubject_matches ()
-guint32
+guint32
nm_setting_802_1x_get_num_phase2_altsubject_matches
(NMSetting8021x *setting);
Returns the number of entries in the
@@ -2602,7 +2613,7 @@ nm_setting_802_1x_get_num_phase2_altsubject_matches
const char *
nm_setting_802_1x_get_phase2_altsubject_match
(NMSetting8021x *setting,
- guint32 i);
+ guint32 i);
Returns the "phase 2" altSubjectName match at index i
.
@@ -2636,7 +2647,7 @@ nm_setting_802_1x_get_phase2_altsubject_match
nm_setting_802_1x_add_phase2_altsubject_match ()
-gboolean
+gboolean
nm_setting_802_1x_add_phase2_altsubject_match
(NMSetting8021x *setting,
const char *phase2_altsubject_match);
@@ -2668,8 +2679,8 @@ connection
@@ -2678,7 +2689,7 @@ successfully added, void
nm_setting_802_1x_remove_phase2_altsubject_match
(NMSetting8021x *setting,
- guint32 i);
+ guint32 i);
Removes the allowed "phase 2" altSubjectName at the specified index.
Parameters
@@ -2706,7 +2717,7 @@ nm_setting_802_1x_remove_phase2_altsubject_match
nm_setting_802_1x_remove_phase2_altsubject_match_by_value ()
-gboolean
+gboolean
nm_setting_802_1x_remove_phase2_altsubject_match_by_value
(NMSetting8021x *setting,
const char *phase2_altsubject_match);
@@ -2736,8 +2747,8 @@ nm_setting_802_1x_remove_phase2_altsubject_match_by_value
@@ -2853,7 +2864,7 @@ returned scheme is
nm_setting_802_1x_get_phase2_client_cert_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_client_cert_blob
(NMSetting8021x *setting);
Client certificates are used to identify the connecting client to the network
@@ -2945,13 +2956,13 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_phase2_client_cert ()
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_client_cert
(NMSetting8021x *setting,
const char *value,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Reads a certificate from disk and sets the “phase2-client-cert”
property with the raw certificate data if using the
NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate
@@ -2979,7 +2990,7 @@ authentication method.
is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" client
certificate file (PEM, DER, or PKCS#12 format). The path must be UTF-8
-encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with
+encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with
any scheme
clears the "phase2" client certificate.
@@ -3004,7 +3015,7 @@ clears the "phase2" client certificate.
@@ -3118,7 +3129,7 @@ nm_setting_802_1x_get_password_flags (
nm_setting_802_1x_get_password_raw ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_password_raw (NMSetting8021x *setting);
Parameters
@@ -3258,7 +3269,7 @@ nm_setting_802_1x_get_private_key_scheme
nm_setting_802_1x_get_private_key_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_private_key_blob
(NMSetting8021x *setting);
Private keys are used to authenticate the connecting client to the network
@@ -3352,13 +3363,13 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_private_key ()
-gboolean
+gboolean
nm_setting_802_1x_set_private_key (NMSetting8021x *setting,
const char *value,
const char *password,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Private keys are used to authenticate the connecting client to the network
when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
authentication method.
@@ -3372,7 +3383,7 @@ verify that password
is correct, and if it is, updates the
“private-key-password” property with the given password
. If
-the decryption is unsuccessful, FALSE is returned, error
+the decryption is unsuccessful, FALSE is returned, error
is set, and no
internal data is changed. If no password
is given, the private key is
@@ -3402,13 +3413,13 @@ key password to prevent unauthorized access to unencrypted private key data.
is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or
NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the private key file
(PEM, DER, or PKCS#12 format). The path must be UTF-8 encoded; use
-g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
+g_filename_to_utf8() to convert if needed. Passing NULL with any scheme
clears the private key.
password
-password used to decrypt the private key, or NULL if the password
+
password used to decrypt the private key, or NULL if the password
is unknown. If the password is given but fails to decrypt the private key,
an error is returned.
@@ -3433,7 +3444,7 @@ an error is returned.
Returns
- TRUE if the operation succeeded, FALSE if it was unsuccessful
+ TRUE if the operation succeeded, FALSE if it was unsuccessful
@@ -3554,7 +3565,7 @@ scheme is
nm_setting_802_1x_get_phase2_private_key_blob ()
-GBytes *
+GBytes *
nm_setting_802_1x_get_phase2_private_key_blob
(NMSetting8021x *setting);
Private keys are used to authenticate the connecting client to the network
@@ -3649,14 +3660,14 @@ for local files and 'data' URIs for inline certificate data).
nm_setting_802_1x_set_phase2_private_key ()
-gboolean
+gboolean
nm_setting_802_1x_set_phase2_private_key
(NMSetting8021x *setting,
const char *value,
const char *password,
NMSetting8021xCKScheme scheme,
NMSetting8021xCKFormat *out_format,
- GError **error);
+ GError **error);
Private keys are used to authenticate the connecting client to the network
when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
authentication method.
@@ -3670,7 +3681,7 @@ verify that password
is correct, and if it is, updates the
“phase2-private-key-password” property with the given
password
-. If the decryption is unsuccessful, FALSE is returned, error
+. If the decryption is unsuccessful, FALSE is returned, error
is
set, and no internal data is changed. If no password
is given, the private
@@ -3700,14 +3711,14 @@ key password to prevent unauthorized access to unencrypted private key data.
is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or
NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" private
key file (PEM, DER, or PKCS#12 format). The path must be UTF-8 encoded;
-use g_filename_to_utf8() to convert if needed. Passing NULL with any
+use g_filename_to_utf8() to convert if needed. Passing NULL with any
scheme
clears the private key.
password
-password used to decrypt the private key, or NULL if the password
+
password used to decrypt the private key, or NULL if the password
is unknown. If the password is given but fails to decrypt the private key,
an error is returned.
@@ -3732,7 +3743,7 @@ an error is returned.
Returns
- TRUE if the operation succeeded, FALSE if it was unsuccessful
+ TRUE if the operation succeeded, FALSE if it was unsuccessful
@@ -3875,7 +3886,7 @@ global default value.
nm_setting_802_1x_get_optional ()
-gboolean
+gboolean
nm_setting_802_1x_get_optional (NMSetting8021x *setting);
Returns the value contained in the “optional” property.
@@ -3895,11 +3906,38 @@ nm_setting_802_1x_get_optional (
Returns
- TRUE if the activation should proceed even when the 802.1X
-authentication fails; FALSE otherwise
+ TRUE if the activation should proceed even when the 802.1X
+authentication fails; FALSE otherwise
Since: 1.22
+
+
+nm_setting_802_1x_get_openssl_ciphers ()
+const char *
+nm_setting_802_1x_get_openssl_ciphers (NMSetting8021x *setting);
+Returns the openssl_ciphers configuration for wpa_supplicant.
+
+
+Since: 1.48
+
+
+