From 1e5977b62f896e844b548c3007ace9e1dfa7f9ed Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Sat, 11 Apr 2020 21:28:04 +0200 Subject: New upstream version 1.23.90 --- docs/libnm/html/NMSetting8021x.html | 203 +++++++++++++++++++++++++++++++++--- 1 file changed, 191 insertions(+), 12 deletions(-) (limited to 'docs/libnm/html/NMSetting8021x.html') diff --git a/docs/libnm/html/NMSetting8021x.html b/docs/libnm/html/NMSetting8021x.html index eec09bbe..3e797b14 100644 --- a/docs/libnm/html/NMSetting8021x.html +++ b/docs/libnm/html/NMSetting8021x.html @@ -8,7 +8,7 @@ - + @@ -37,8 +37,8 @@

Functions

--++ @@ -262,6 +262,13 @@ + + + + @@ -464,6 +471,13 @@ + + + + @@ -779,6 +793,12 @@ + + + + + @@ -829,7 +849,7 @@ - + + + + + + @@ -972,7 +998,7 @@ - +
const char * + +nm_setting_802_1x_get_domain_match () +
NMSetting8021xCKScheme
const char * + +nm_setting_802_1x_get_phase2_domain_match () +
NMSetting8021xCKScheme
gchar *domain-matchRead / Write
+gchar * domain-suffix-match Read / Write
guint phase1-auth-flagsRead / Write / ConstructRead / Write
@@ -909,6 +929,12 @@
gchar *phase2-domain-matchRead / Write
+gchar * phase2-domain-suffix-match Read / Write
gboolean system-ca-certsRead / Write / ConstructRead / Write
@@ -981,8 +1007,8 @@

Types and Values

--++ @@ -1055,6 +1081,10 @@ + + + + @@ -1119,6 +1149,10 @@ + + + + @@ -2142,6 +2176,32 @@ nm_setting_802_1x_get_domain_suffix_match
+

nm_setting_802_1x_get_domain_match ()

+
const char *
+nm_setting_802_1x_get_domain_match (NMSetting8021x *setting);
+
+

Parameters

+
#defineNM_SETTING_802_1X_DOMAIN_MATCH
#define NM_SETTING_802_1X_CLIENT_CERT
#defineNM_SETTING_802_1X_PHASE2_DOMAIN_MATCH
#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT
+++++ + + + + + +

setting

the NMSetting8021x

 
+ +
+

Returns

+

the “domain-match” property.

+
+

Since: 1.24

+ +
+

nm_setting_802_1x_get_client_cert_scheme ()

NMSetting8021xCKScheme
 nm_setting_802_1x_get_client_cert_scheme
@@ -3018,6 +3078,33 @@ nm_setting_802_1x_get_phase2_domain_suffix_match
+

nm_setting_802_1x_get_phase2_domain_match ()

+
const char *
+nm_setting_802_1x_get_phase2_domain_match
+                               (NMSetting8021x *setting);
+
+

Parameters

+
+++++ + + + + + +

setting

the NMSetting8021x

 
+
+
+

Returns

+

the “phase2-domain-match” property.

+
+

Since: 1.24

+
+
+

nm_setting_802_1x_get_phase2_client_cert_scheme ()

NMSetting8021xCKScheme
 nm_setting_802_1x_get_phase2_client_cert_scheme
@@ -4342,6 +4429,12 @@ type.
+

NM_SETTING_802_1X_DOMAIN_MATCH

+
#define NM_SETTING_802_1X_DOMAIN_MATCH "domain-match"
+
+
+
+

NM_SETTING_802_1X_CLIENT_CERT

#define NM_SETTING_802_1X_CLIENT_CERT "client-cert"
@@ -4438,6 +4531,12 @@ type.

+

NM_SETTING_802_1X_PHASE2_DOMAIN_MATCH

+
#define NM_SETTING_802_1X_PHASE2_DOMAIN_MATCH "phase2-domain-match"
+
+
+
+

NM_SETTING_802_1X_PHASE2_CLIENT_CERT

#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT "phase2-client-cert"
@@ -4559,6 +4658,7 @@ type.

List of strings to be matched against the altSubjectName of the certificate presented by the authentication server. If the list is empty, no verification of the server certificate's altSubjectName is performed.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4568,6 +4668,7 @@ no verification of the server certificate's altSubjectName is performed.

Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4577,6 +4678,7 @@ identity like EAP-TTLS.

  “auth-timeout”             gint

A timeout for the authentication. Zero means the global default; if the global default is not set, the authentication timeout is 25 seconds.

+

Owner: NMSetting8021x

Flags: Read / Write

Allowed values: >= 0

Default value: 0

@@ -4598,6 +4700,7 @@ property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.

Setting this property directly is discouraged; use the nm_setting_802_1x_set_ca_cert() function instead.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4607,6 +4710,7 @@ but this allows man-in-the-middle attacks and is NOT recommended.

The password used to access the CA certificate stored in “ca-cert” property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.8

@@ -4616,6 +4720,7 @@ is stored on a PKCS#11 token that requires a login.

The “ca-cert-password-flags” property

  “ca-cert-password-flags”   NMSettingSecretFlags

Flags indicating how to handle the “ca-cert-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Since: 1.8

@@ -4626,6 +4731,7 @@ is stored on a PKCS#11 token that requires a login.

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the “ca-cert” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4643,6 +4749,7 @@ should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte.

Setting this property directly is discouraged; use the nm_setting_802_1x_set_client_cert() function instead.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4652,6 +4759,7 @@ with the string "file://" and ending with a terminating NUL byte.

The password used to access the client certificate stored in “client-cert” property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.8

@@ -4661,18 +4769,37 @@ is stored on a PKCS#11 token that requires a login.

The “client-cert-password-flags” property

  “client-cert-password-flags” NMSettingSecretFlags

Flags indicating how to handle the “client-cert-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Since: 1.8

+

The “domain-match” property

+
  “domain-match”             gchar *
+

Constraint for server domain name. If set, this list of FQDNs is used as +a match requirement for dNSName element(s) of the certificate presented +by the authentication server. If a matching dNSName is found, this +constraint is met. If no dNSName values are present, this constraint is +matched against SubjectName CN using the same comparison. +Multiple valid FQDNs can be passed as a ";" delimited list.

+

Owner: NMSetting8021x

+

Flags: Read / Write

+

Default value: NULL

+

Since: 1.24

+
+
+

The “domain-suffix-match” property

  “domain-suffix-match”      gchar *

Constraint for server domain name. If set, this FQDN is used as a suffix match requirement for dNSName element(s) of the certificate presented by the authentication server. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is -matched against SubjectName CN using same suffix match comparison.

+matched against SubjectName CN using same suffix match comparison. +Since version 1.24, multiple valid FQDNs can be passed as a ";" delimited +list.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.2

@@ -4686,6 +4813,7 @@ matched against SubjectName CN using same suffix match comparison.

and "fast". Each method requires different configuration using the properties of this setting; refer to wpa_supplicant documentation for the allowed combinations.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4694,6 +4822,7 @@ allowed combinations.

  “identity”                 gchar *

Identity string for EAP authentication methods. Often the user's user or login name.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4706,6 +4835,7 @@ will continue even after a timeout or an authentication failure. Setting the property to TRUE is currently allowed only for Ethernet connections. If set to FALSE, the activation can continue only after a successful authentication.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: FALSE

Since: 1.22

@@ -4715,6 +4845,7 @@ authentication.

The “pac-file” property

  “pac-file”                 gchar *

UTF-8 encoded file path containing PAC for EAP-FAST.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4725,6 +4856,7 @@ authentication.

UTF-8 encoded password used for EAP authentication methods. If both the “password” property and the “password-raw” property are specified, “password” is preferred.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4733,6 +4865,7 @@ property are specified,

The “password-flags” property

  “password-flags”           NMSettingSecretFlags

Flags indicating how to handle the “password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4743,6 +4876,7 @@ property are specified, “password” property and the “password-raw” property are specified, “password” is preferred.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4750,6 +4884,7 @@ property are specified,

The “password-raw-flags” property

  “password-raw-flags”       NMSettingSecretFlags

Flags indicating how to handle the “password-raw” property.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4762,7 +4897,8 @@ The individual TLS versions can be explicitly disabled. If a certain TLS disable flag is not set, it is up to the supplicant to allow or forbid it. The TLS options map to tls_disable_tlsv1_x settings. See the wpa_supplicant documentation for more details.

-

Flags: Read / Write / Construct

+

Owner: NMSetting8021x

+

Flags: Read / Write

Default value: 0

Since: 1.8

@@ -4776,6 +4912,7 @@ Recognized values are "0" (disabled), "1" (allow unauthenticated provisioning), "2" (allow authenticated provisioning), and "3" (allow both authenticated and unauthenticated provisioning). See the wpa_supplicant documentation for more details.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4787,6 +4924,7 @@ wpa_supplicant documentation for more details.

servers may require forcing the new PEAP label to interoperate with PEAPv1. Set to "1" to force use of the new PEAP label. See the wpa_supplicant documentation for more details.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4800,6 +4938,7 @@ the server will be used. Sometimes when using older RADIUS servers, it is necessary to force the client to use a particular PEAP version. To do so, this property may be set to "0" or "1" to force that specific PEAP version.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4811,6 +4950,7 @@ version.

certificate presented by the authentication server during the inner "phase 2" authentication. If the list is empty, no verification of the server certificate's altSubjectName is performed.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4823,6 +4963,7 @@ an EAP method that uses an inner TLS tunnel is specified in the "pap", "chap", "mschap", "mschapv2", "gtc", "otp", "md5", and "tls". Each "phase 2" inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4836,6 +4977,7 @@ when an EAP method that uses an inner TLS tunnel is specified in the "md5", "mschapv2", "otp", "gtc", and "tls". Each "phase 2" inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4856,6 +4998,7 @@ property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.

Setting this property directly is discouraged; use the nm_setting_802_1x_set_phase2_ca_cert() function instead.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4865,6 +5008,7 @@ but this allows man-in-the-middle attacks and is NOT recommended.

The password used to access the "phase2" CA certificate stored in “phase2-ca-cert” property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.8

@@ -4874,6 +5018,7 @@ is stored on a PKCS#11 token that requires a login.

The “phase2-ca-cert-password-flags” property

  “phase2-ca-cert-password-flags” NMSettingSecretFlags

Flags indicating how to handle the “phase2-ca-cert-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Since: 1.8

@@ -4884,6 +5029,7 @@ is stored on a PKCS#11 token that requires a login.

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the “phase2-ca-cert” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4904,6 +5050,7 @@ property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.

Setting this property directly is discouraged; use the nm_setting_802_1x_set_phase2_client_cert() function instead.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4913,6 +5060,7 @@ but this allows man-in-the-middle attacks and is NOT recommended.

The password used to access the "phase2" client certificate stored in “phase2-client-cert” property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.8

@@ -4922,11 +5070,28 @@ is stored on a PKCS#11 token that requires a login.

The “phase2-client-cert-password-flags” property

  “phase2-client-cert-password-flags” NMSettingSecretFlags

Flags indicating how to handle the “phase2-client-cert-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

Since: 1.8

+

The “phase2-domain-match” property

+
  “phase2-domain-match”      gchar *
+

Constraint for server domain name. If set, this list of FQDNs is used as +a match requirement for dNSName element(s) of the certificate presented +by the authentication server during the inner "phase 2" authentication. +If a matching dNSName is found, this constraint is met. If no dNSName +values are present, this constraint is matched against SubjectName CN +using the same comparison. +Multiple valid FQDNs can be passed as a ";" delimited list.

+

Owner: NMSetting8021x

+

Flags: Read / Write

+

Default value: NULL

+

Since: 1.24

+
+
+

The “phase2-domain-suffix-match” property

  “phase2-domain-suffix-match” gchar *

Constraint for server domain name. If set, this FQDN is used as a suffix @@ -4934,7 +5099,10 @@ match requirement for dNSName element(s) of the certificate presented by the authentication server during the inner "phase 2" authentication. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is matched against SubjectName CN -using same suffix match comparison.

+using same suffix match comparison. +Since version 1.24, multiple valid FQDNs can be passed as a ";" delimited +list.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

Since: 1.2

@@ -4963,6 +5131,7 @@ NUL byte, and as with the blob scheme the password used to decode the PKCS#12 private key and certificate.

Setting this property directly is discouraged; use the nm_setting_802_1x_set_phase2_private_key() function instead.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4976,6 +5145,7 @@ property directly is not generally necessary except when returning secrets to NetworkManager; it is generally set automatically when setting the private key by the nm_setting_802_1x_set_phase2_private_key() function.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -4985,6 +5155,7 @@ function.

  “phase2-private-key-password-flags” NMSettingSecretFlags

Flags indicating how to handle the “phase2-private-key-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -4997,6 +5168,7 @@ authentication. When unset, no verification of the authentication server certificate's subject is performed. This property provides little security, if any, and its use is deprecated in favor of NMSetting8021x:phase2-domain-suffix-match.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -5005,6 +5177,7 @@ NMSetting8021x:phase2-domain-suffix-match.

The “pin” property

  “pin”                      gchar *

PIN used for EAP authentication methods.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -5013,6 +5186,7 @@ NMSetting8021x:phase2-domain-suffix-match.

The “pin-flags” property

  “pin-flags”                NMSettingSecretFlags

Flags indicating how to handle the “pin” property.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -5043,6 +5217,7 @@ unencrypted private key data using the BLOB scheme may be readable by unprivileged users. Private keys should always be encrypted with a private key password to prevent unauthorized access to unencrypted private key data.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -5055,6 +5230,7 @@ path scheme, or if the private key is a PKCS#12 format key. Setting this property directly is not generally necessary except when returning secrets to NetworkManager; it is generally set automatically when setting the private key by the nm_setting_802_1x_set_private_key() function.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -5064,6 +5240,7 @@ the private key by the “private-key-password-flags” NMSettingSecretFlags

Flags indicating how to handle the “private-key-password” property.

+

Owner: NMSetting8021x

Flags: Read / Write

@@ -5075,6 +5252,7 @@ by the authentication server. When unset, no verification of the authentication server certificate's subject is performed. This property provides little security, if any, and its use is deprecated in favor of NMSetting8021x:domain-suffix-match.

+

Owner: NMSetting8021x

Flags: Read / Write

Default value: NULL

@@ -5091,12 +5269,13 @@ addition to any certificates specified by the “ca-cert” and “phase2-ca-cert” properties instead (sets ca_cert/ca_cert2 options for wpa_supplicant).

-

Flags: Read / Write / Construct

+

Owner: NMSetting8021x

+

Flags: Read / Write

Default value: FALSE

-
Generated by GTK-Doc V1.29
+
Generated by GTK-Doc V1.32.1 \ No newline at end of file -- cgit 1.3.0-6-gf8a5 From d460892bbfece74fb6d3cd846bf6ef548290be41 Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Fri, 8 May 2020 21:40:53 +0200 Subject: New upstream version 1.24.0 --- docs/libnm/html/NMSetting8021x.html | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'docs/libnm/html/NMSetting8021x.html') diff --git a/docs/libnm/html/NMSetting8021x.html b/docs/libnm/html/NMSetting8021x.html index 3e797b14..4413b405 100644 --- a/docs/libnm/html/NMSetting8021x.html +++ b/docs/libnm/html/NMSetting8021x.html @@ -8,7 +8,7 @@ - + @@ -5276,6 +5276,6 @@ properties instead (sets ca_cert/ca_cert2 options for wpa_supplicant).

-
Generated by GTK-Doc V1.32.1
+
Generated by GTK-Doc V1.32 \ No newline at end of file -- cgit 1.3.0-6-gf8a5