From d9c99a29a0d3384c9c3d2adce430f5cb1134ab6a Mon Sep 17 00:00:00 2001 From: Michael Biebl Date: Wed, 30 Mar 2016 00:56:30 +0200 Subject: Imported Upstream version 1.1.92 --- docs/libnm/html/NMSetting8021x.html | 607 ++++++++++++++++++++++-------------- 1 file changed, 369 insertions(+), 238 deletions(-) (limited to 'docs/libnm/html/NMSetting8021x.html') diff --git a/docs/libnm/html/NMSetting8021x.html b/docs/libnm/html/NMSetting8021x.html index 993d2bde..a71d5022 100644 --- a/docs/libnm/html/NMSetting8021x.html +++ b/docs/libnm/html/NMSetting8021x.html @@ -59,7 +59,7 @@ -guint32 +guint32 nm_setting_802_1x_get_num_eap_methods () @@ -74,7 +74,7 @@ -gboolean +gboolean nm_setting_802_1x_add_eap_method () @@ -90,7 +90,7 @@ -gboolean +gboolean nm_setting_802_1x_remove_eap_method_by_value () @@ -127,7 +127,7 @@ -gboolean +gboolean nm_setting_802_1x_get_system_ca_certs () @@ -157,7 +157,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_ca_cert_blob () @@ -172,7 +172,7 @@ -gboolean +gboolean nm_setting_802_1x_set_ca_cert () @@ -187,7 +187,7 @@ -guint32 +guint32 nm_setting_802_1x_get_num_altsubject_matches () @@ -202,7 +202,7 @@ -gboolean +gboolean nm_setting_802_1x_add_altsubject_match () @@ -218,7 +218,7 @@ -gboolean +gboolean nm_setting_802_1x_remove_altsubject_match_by_value () @@ -233,6 +233,13 @@ +const char * + + +nm_setting_802_1x_get_domain_suffix_match () + + + NMSetting8021xCKScheme @@ -242,7 +249,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_client_cert_blob () @@ -257,7 +264,7 @@ -gboolean +gboolean nm_setting_802_1x_set_client_cert () @@ -308,7 +315,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_phase2_ca_cert_blob () @@ -323,7 +330,7 @@ -gboolean +gboolean nm_setting_802_1x_set_phase2_ca_cert () @@ -338,7 +345,7 @@ -guint32 +guint32 nm_setting_802_1x_get_num_phase2_altsubject_matches () @@ -353,7 +360,7 @@ -gboolean +gboolean nm_setting_802_1x_add_phase2_altsubject_match () @@ -369,7 +376,7 @@ -gboolean +gboolean nm_setting_802_1x_remove_phase2_altsubject_match_by_value () @@ -384,6 +391,13 @@ +const char * + + +nm_setting_802_1x_get_phase2_domain_suffix_match () + + + NMSetting8021xCKScheme @@ -393,7 +407,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_phase2_client_cert_blob () @@ -408,7 +422,7 @@ -gboolean +gboolean nm_setting_802_1x_set_phase2_client_cert () @@ -431,7 +445,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_password_raw () @@ -470,7 +484,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_private_key_blob () @@ -485,7 +499,7 @@ -gboolean +gboolean nm_setting_802_1x_set_private_key () @@ -524,7 +538,7 @@ -GBytes * +GBytes * nm_setting_802_1x_get_phase2_private_key_blob () @@ -539,7 +553,7 @@ -gboolean +gboolean nm_setting_802_1x_set_phase2_private_key () @@ -581,54 +595,60 @@ -GStrv +GStrv altsubject-matches Read / Write -gchar * +gchar * anonymous-identity Read / Write -GBytes * +GBytes * ca-cert Read / Write -gchar * +gchar * ca-path Read / Write -GBytes * +GBytes * client-cert Read / Write -GStrv + +gchar * +domain-suffix-match +Read / Write + + +GStrv eap Read / Write -gchar * +gchar * identity Read / Write -gchar * +gchar * pac-file Read / Write -gchar * +gchar * password Read / Write @@ -639,7 +659,7 @@ -GBytes * +GBytes * password-raw Read / Write @@ -650,66 +670,72 @@ -gchar * +gchar * phase1-fast-provisioning Read / Write -gchar * +gchar * phase1-peaplabel Read / Write -gchar * +gchar * phase1-peapver Read / Write -GStrv +GStrv phase2-altsubject-matches Read / Write -gchar * +gchar * phase2-auth Read / Write -gchar * +gchar * phase2-autheap Read / Write -GBytes * +GBytes * phase2-ca-cert Read / Write -gchar * +gchar * phase2-ca-path Read / Write -GBytes * +GBytes * phase2-client-cert Read / Write -GBytes * +gchar * +phase2-domain-suffix-match +Read / Write + + + +GBytes * phase2-private-key Read / Write -gchar * +gchar * phase2-private-key-password Read / Write @@ -720,13 +746,13 @@ -gchar * +gchar * phase2-subject-match Read / Write -gchar * +gchar * pin Read / Write @@ -737,13 +763,13 @@ -GBytes * +GBytes * private-key Read / Write -gchar * +gchar * private-key-password Read / Write @@ -754,12 +780,12 @@ -gchar * +gchar * subject-match Read / Write -gboolean +gboolean system-ca-certs Read / Write / Construct @@ -824,6 +850,10 @@ #define +NM_SETTING_802_1X_DOMAIN_SUFFIX_MATCH + + +#define NM_SETTING_802_1X_CLIENT_CERT @@ -864,6 +894,10 @@ #define +NM_SETTING_802_1X_PHASE2_DOMAIN_SUFFIX_MATCH + + +#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT @@ -923,10 +957,10 @@

Object Hierarchy

-
    GEnum
+
    GEnum
     ├── NMSetting8021xCKFormat
     ╰── NMSetting8021xCKScheme
-    GObject
+    GObject
     ╰── NMSetting
         ╰── NMSetting8021x
 

@@ -968,9 +1002,9 @@ nm_setting_802_1x_new (void
 
nm_setting_802_1x_check_cert_scheme ()

 
NMSetting8021xCKScheme
-nm_setting_802_1x_check_cert_scheme (gconstpointer pdata,
-                                     gsize length,
-                                     GError **error);

+nm_setting_802_1x_check_cert_scheme (gconstpointer pdata,
+                                     gsize length,
+                                     GError **error);

Determines and verifies the blob type. When setting certificate properties of NMSetting8021x the blob must be not UNKNOWN (or NULL).

@@ -1011,7 +1045,7 @@ For NULL it also returns NM_SETTING_802_1X_CK_SCHEME_UNKNOWN.

nm_setting_802_1x_get_num_eap_methods ()

-
guint32
+
guint32
 nm_setting_802_1x_get_num_eap_methods (NMSetting8021x *setting);

 
Returns the number of eap methods allowed for use when connecting to the
 network.  Generally only one EAP method is used.  Use the functions
@@ -1043,7 +1077,7 @@ allowed EAP methods.

 
nm_setting_802_1x_get_eap_method ()

 
const char *
 nm_setting_802_1x_get_eap_method (NMSetting8021x *setting,
-                                  guint32 i);

+                                  guint32 i);

Returns the name of the allowed EAP method at index i .

@@ -1077,7 +1111,7 @@ nm_setting_802_1x_get_eap_method (

nm_setting_802_1x_add_eap_method ()

-
gboolean
+
gboolean
 nm_setting_802_1x_add_eap_method (NMSetting8021x *setting,
                                   const char *eap);

 
Adds an allowed EAP method.  The setting is not valid until at least one
@@ -1107,7 +1141,7 @@ allowed EAP methods.

Returns

-

TRUE if the EAP method was successfully added, FALSE if it was +

TRUE if the EAP method was successfully added, FALSE if it was not a valid method or if it was already allowed.

@@ -1116,7 +1150,7 @@ not a valid method or if it was already allowed.

nm_setting_802_1x_remove_eap_method ()

void
 nm_setting_802_1x_remove_eap_method (NMSetting8021x *setting,
-                                     guint32 i);
+ guint32 i);

Removes the allowed EAP method at the specified index.

Parameters

@@ -1144,7 +1178,7 @@ nm_setting_802_1x_remove_eap_method (

nm_setting_802_1x_remove_eap_method_by_value ()

-
gboolean
+
gboolean
 nm_setting_802_1x_remove_eap_method_by_value
                                (NMSetting8021x *setting,
                                 const char *eap);

@@ -1174,7 +1208,7 @@ nm_setting_802_1x_remove_eap_method_by_value

Returns

-

TRUE if the EAP method was founs and removed, FALSE if it was not.

+

TRUE if the EAP method was founs and removed, FALSE if it was not.

@@ -1285,12 +1319,12 @@ nm_setting_802_1x_get_pac_file (

nm_setting_802_1x_get_system_ca_certs ()

-
gboolean
+
gboolean
 nm_setting_802_1x_get_system_ca_certs (NMSetting8021x *setting);

 
Sets the “system-ca-certs” property. The
 “ca-path” and “phase2-ca-path”
 properties are ignored if the “system-ca-certs” property is
-TRUE, in which case a system-wide CA certificate directory specified at
+TRUE, in which case a system-wide CA certificate directory specified at
 compile time (using the --system-ca-path configure option) is used in place
 of these properties.

 

@@ -1310,7 +1344,7 @@ of these properties.

 

 

 
Returns

-
 TRUE if a system CA certificate path should be used, FALSE if not

+
 TRUE if a system CA certificate path should be used, FALSE if not
@@ -1404,7 +1438,7 @@ if

nm_setting_802_1x_get_ca_cert_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_ca_cert_blob (NMSetting8021x *setting);

 
Returns the CA certificate blob if the CA certificate is stored using the
 NM_SETTING_802_1X_CK_SCHEME_BLOB scheme.  Not all EAP methods use a
@@ -1467,12 +1501,12 @@ of the network cannot be confirmed by the client.

 

 

 
nm_setting_802_1x_set_ca_cert ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_ca_cert (NMSetting8021x *setting,
                                const char *cert_path,
                                NMSetting8021xCKScheme scheme,
                                NMSetting8021xCKFormat *out_format,
-                               GError **error);

+                               GError **error);

 
Reads a certificate from disk and sets the “ca-cert” property
 with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB
 scheme, or with the path to the certificate file if using the
@@ -1497,7 +1531,7 @@ scheme, or with the path to the certificate file if using the
 is set to either NM_SETTING_802_1X_CK_SCHEME_PATH
 or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the CA certificate
 file (PEM or DER format).  The path must be UTF-8 encoded; use
-g_filename_to_utf8() to convert if needed.  Passing NULL with any scheme
+g_filename_to_utf8() to convert if needed.  Passing NULL with any scheme
 clears the CA certificate.

  
 
@@ -1521,7 +1555,7 @@ clears the CA certificate.

 

 

 
Returns

-
 TRUE if the operation succeeded, FALSE if it was unsuccessful

+
 TRUE if the operation succeeded, FALSE if it was unsuccessful
@@ -1548,14 +1582,14 @@ nm_setting_802_1x_get_subject_match (

Returns

the “subject-match” property. This is the substring to be matched against the subject of the authentication -server certificate, or NULL no subject verification is to be +server certificate, or NULL no subject verification is to be performed.

nm_setting_802_1x_get_num_altsubject_matches ()

-
guint32
+
guint32
 nm_setting_802_1x_get_num_altsubject_matches
                                (NMSetting8021x *setting);

 
Returns the number of entries in the
@@ -1586,7 +1620,7 @@ nm_setting_802_1x_get_num_altsubject_matches
 
const char *
 nm_setting_802_1x_get_altsubject_match
                                (NMSetting8021x *setting,
-                                guint32 i);

+                                guint32 i);

Returns the altSubjectName match at index i .

@@ -1620,7 +1654,7 @@ nm_setting_802_1x_get_altsubject_match

nm_setting_802_1x_add_altsubject_match ()

-
gboolean
+
gboolean
 nm_setting_802_1x_add_altsubject_match
                                (NMSetting8021x *setting,
                                 const char *altsubject_match);

@@ -1651,8 +1685,8 @@ server is not verified.

Returns

-

TRUE if the alternative subject name match was -successfully added, FALSE if it was already allowed.

+

TRUE if the alternative subject name match was +successfully added, FALSE if it was already allowed.

@@ -1661,7 +1695,7 @@ successfully added, void nm_setting_802_1x_remove_altsubject_match (NMSetting8021x *setting, - guint32 i); + guint32 i);

Removes the allowed altSubjectName at the specified index.

Parameters

@@ -1689,7 +1723,7 @@ nm_setting_802_1x_remove_altsubject_match

nm_setting_802_1x_remove_altsubject_match_by_value ()

-
gboolean
+
gboolean
 nm_setting_802_1x_remove_altsubject_match_by_value
                                (NMSetting8021x *setting,
                                 const char *altsubject_match);

@@ -1719,8 +1753,8 @@ nm_setting_802_1x_remove_altsubject_match_by_value

Returns

-

TRUE if the alternative subject name match was found and removed, -FALSE if it was not.

+

TRUE if the alternative subject name match was found and removed, +FALSE if it was not.

@@ -1748,6 +1782,33 @@ nm_setting_802_1x_clear_altsubject_matches
+

nm_setting_802_1x_get_domain_suffix_match ()

+
const char *
+nm_setting_802_1x_get_domain_suffix_match
+                               (NMSetting8021x *setting);
+
+

Parameters

+
+++++ + + + + + +

setting

the NMSetting8021x

 
+
+
+

Returns

+

the “domain-suffix-match” property.

+
+

Since: 1.2

+
+
+

nm_setting_802_1x_get_client_cert_scheme ()

NMSetting8021xCKScheme
 nm_setting_802_1x_get_client_cert_scheme
@@ -1756,7 +1817,7 @@ nm_setting_802_1x_get_client_cert_scheme
 is NM_SETTING_802_1X_CK_SCHEME_BLOB, use nm_setting_802_1x_get_client_cert_blob();
 if NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_client_cert_path().

 

-
Parameters

+
Parameters

 
@@ -1771,21 +1832,21 @@ if 
-
Returns

+
Returns
 scheme used to store the client certificate (blob or path)

 
nm_setting_802_1x_get_client_cert_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_client_cert_blob
                                (NMSetting8021x *setting);

 
Client certificates are used to identify the connecting client to the network
 when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
 authentication method.

 

-
Parameters

+
Parameters

 

 
 

 
 
 
 
 
@@ -1800,7 +1861,7 @@ authentication method.

 
 

 

 

 

-
Returns

+
Returns

 
 the client certificate data. 

 
[transfer none]

 

@@ -1815,7 +1876,7 @@ nm_setting_802_1x_get_client_cert_path
 when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
 authentication method.

 

-
Parameters

+
Parameters

 
@@ -1830,19 +1891,19 @@ authentication method.

 
 

 

 

 

-
Returns

+
Returns

 
 path to the client certificate file

nm_setting_802_1x_set_client_cert ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_client_cert (NMSetting8021x *setting,
                                    const char *cert_path,
                                    NMSetting8021xCKScheme scheme,
                                    NMSetting8021xCKFormat *out_format,
-                                   GError **error);

+                                   GError **error);

Reads a certificate from disk and sets the “client-cert” property with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate @@ -1851,7 +1912,7 @@ file if using the

-

Parameters

+

Parameters

@@ -1870,7 +1931,7 @@ authentication method.

is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the client certificate file (PEM, DER, or PKCS#12 format). The path must be UTF-8 -encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with +encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with any scheme clears the client certificate.

@@ -1894,8 +1955,8 @@ clears the client certificate.

 
-

Returns

-

TRUE if the operation succeeded, FALSE if it was unsuccessful

+

Returns

+

TRUE if the operation succeeded, FALSE if it was unsuccessful

@@ -1904,7 +1965,7 @@ clears the client certificate.

const char *
 nm_setting_802_1x_get_phase1_peapver (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -1919,10 +1980,10 @@ nm_setting_802_1x_get_phase1_peapver ( -

Returns

+

Returns

the "phase 1" PEAP version to be used when authenticating with EAP-PEAP as contained in the “phase1-peapver” property. Valid -values are NULL (unset), "0" (PEAP version 0), and "1" (PEAP version 1).

+values are NULL (unset), "0" (PEAP version 0), and "1" (PEAP version 1).

@@ -1932,7 +1993,7 @@ values are NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -1947,10 +2008,10 @@ nm_setting_802_1x_get_phase1_peaplabel
-

Returns

+

Returns

whether the "phase 1" PEAP label is new-style or old-style, to be used when authenticating with EAP-PEAP, as contained in the -“phase1-peaplabel” property. Valid values are NULL (unset), +“phase1-peaplabel” property. Valid values are NULL (unset), "0" (use old-style label), and "1" (use new-style label). See the wpa_supplicant documentation for more details.

@@ -1962,7 +2023,7 @@ wpa_supplicant documentation for more details.

nm_setting_802_1x_get_phase1_fast_provisioning (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -1977,7 +2038,7 @@ nm_setting_802_1x_get_phase1_fast_provisioning
-

Returns

+

Returns

whether "phase 1" PEAP fast provisioning should be used, as specified by the “phase1-fast-provisioning” property. See the wpa_supplicant documentation for more details.

@@ -1989,7 +2050,7 @@ wpa_supplicant documentation for more details.

const char *
 nm_setting_802_1x_get_phase2_auth (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2004,7 +2065,7 @@ nm_setting_802_1x_get_phase2_auth (
-

Returns

+

Returns

the "phase 2" non-EAP (ex MD5) allowed authentication method as specified by the “phase2-auth” property.

@@ -2015,7 +2076,7 @@ specified by the const char * nm_setting_802_1x_get_phase2_autheap (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2030,7 +2091,7 @@ nm_setting_802_1x_get_phase2_autheap ( -

Returns

+

Returns

the "phase 2" EAP-based (ex TLS) allowed authentication method as specified by the “phase2-autheap” property.

@@ -2046,7 +2107,7 @@ returned scheme is nm_setting_802_1x_get_ca_cert_blob(); if NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_ca_cert_path().

-

Parameters

+

Parameters

@@ -2061,14 +2122,14 @@ use -

Returns

+

Returns

scheme used to store the "phase 2" CA certificate (blob or path)

nm_setting_802_1x_get_phase2_ca_cert_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_phase2_ca_cert_blob
                                (NMSetting8021x *setting);

 
Returns the "phase 2" CA certificate blob if the CA certificate is stored
@@ -2078,7 +2139,7 @@ CA certificate allow it to be unset.  Note that lack of a CA certificate
 reduces security by allowing man-in-the-middle attacks, because the identity
 of the network cannot be confirmed by the client.

 

-
Parameters

+
Parameters
@@ -2093,7 +2154,7 @@ of the network cannot be confirmed by the client.

-

Returns

+

Returns

the "phase 2" CA certificate data.

[transfer none]

@@ -2111,7 +2172,7 @@ CA certificate allow it to be unset. Note that lack of a CA certificate reduces security by allowing man-in-the-middle attacks, because the identity of the network cannot be confirmed by the client.

-

Parameters

+

Parameters

@@ -2126,25 +2187,25 @@ of the network cannot be confirmed by the client.

-

Returns

+

Returns

path to the "phase 2" CA certificate file

nm_setting_802_1x_set_phase2_ca_cert ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_phase2_ca_cert (NMSetting8021x *setting,
                                       const char *cert_path,
                                       NMSetting8021xCKScheme scheme,
                                       NMSetting8021xCKFormat *out_format,
-                                      GError **error);

+                                      GError **error);

Reads a certificate from disk and sets the “phase2-ca-cert” property with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate file if using the NM_SETTING_802_1X_CK_SCHEME_PATH scheme.

-

Parameters

+

Parameters

@@ -2163,7 +2224,7 @@ file if using the NM_SETTING_802_1X_CK_SCHEME_PATH or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" CA certificate file (PEM or DER format). The path must be UTF-8 encoded; use -g_filename_to_utf8() to convert if needed. Passing NULL with any scheme +g_filename_to_utf8() to convert if needed. Passing NULL with any scheme clears the "phase2" CA certificate.

@@ -2186,8 +2247,8 @@ clears the "phase2" CA certificate.

 
-

Returns

-

TRUE if the operation succeeded, FALSE if it was unsuccessful

+

Returns

+

TRUE if the operation succeeded, FALSE if it was unsuccessful

@@ -2197,7 +2258,7 @@ clears the "phase2" CA certificate.

nm_setting_802_1x_get_phase2_subject_match (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2212,23 +2273,23 @@ nm_setting_802_1x_get_phase2_subject_match
-

Returns

+

Returns

the “phase2-subject-match” property. This is the substring to be matched against the subject of the "phase 2" -authentication server certificate, or NULL no subject verification +authentication server certificate, or NULL no subject verification is to be performed.

nm_setting_802_1x_get_num_phase2_altsubject_matches ()

-
guint32
+
guint32
 nm_setting_802_1x_get_num_phase2_altsubject_matches
                                (NMSetting8021x *setting);

 
Returns the number of entries in the
 “phase2-altsubject-matches” property of this setting.

 

-
Parameters

+
Parameters

 
@@ -2243,7 +2304,7 @@ nm_setting_802_1x_get_num_phase2_altsubject_matches
 

 
 


 

 

-
Returns

+
Returns

 
 the number of phase2-altsubject-matches entries.
@@ -2253,11 +2314,11 @@ nm_setting_802_1x_get_num_phase2_altsubject_matches 
const char *
 nm_setting_802_1x_get_phase2_altsubject_match
                                (NMSetting8021x *setting,
-                                guint32 i);
+ guint32 i);

Returns the "phase 2" altSubjectName match at index i .

-

Parameters

+

Parameters

@@ -2279,7 +2340,7 @@ nm_setting_802_1x_get_phase2_altsubject_match
-

Returns

+

Returns

the "phase 2" altSubjectName match at index i

@@ -2287,7 +2348,7 @@ nm_setting_802_1x_get_phase2_altsubject_match

nm_setting_802_1x_add_phase2_altsubject_match ()

-
gboolean
+
gboolean
 nm_setting_802_1x_add_phase2_altsubject_match
                                (NMSetting8021x *setting,
                                 const char *phase2_altsubject_match);

@@ -2295,7 +2356,7 @@ nm_setting_802_1x_add_phase2_altsubject_match
 at least one match is added, the altSubjectName of the "phase 2"
 remote authentication server is not verified.

 

-
Parameters

+
Parameters

 
@@ -2318,9 +2379,9 @@ connection

 
 

 

 

 

-
Returns

-
 TRUE if the "phase 2" alternative subject name match was
-successfully added, FALSE if it was already allowed.

+
Returns

+
 TRUE if the "phase 2" alternative subject name match was
+successfully added, FALSE if it was already allowed.
@@ -2329,10 +2390,10 @@ successfully added, void nm_setting_802_1x_remove_phase2_altsubject_match (NMSetting8021x *setting, - guint32 i); + guint32 i);

Removes the allowed "phase 2" altSubjectName at the specified index.

-

Parameters

+

Parameters

@@ -2357,14 +2418,14 @@ nm_setting_802_1x_remove_phase2_altsubject_match

nm_setting_802_1x_remove_phase2_altsubject_match_by_value ()

-
gboolean
+
gboolean
 nm_setting_802_1x_remove_phase2_altsubject_match_by_value
                                (NMSetting8021x *setting,
                                 const char *phase2_altsubject_match);

 
Removes the allowed "phase 2" altSubjectName phase2_altsubject_match
 .

 

-
Parameters

+
Parameters
@@ -2386,9 +2447,9 @@ nm_setting_802_1x_remove_phase2_altsubject_match_by_value
-

Returns

-

TRUE if the alternative subject name match for "phase 2" was found and removed, -FALSE if it was not.

+

Returns

+

TRUE if the alternative subject name match for "phase 2" was found and removed, +FALSE if it was not.

@@ -2399,7 +2460,7 @@ nm_setting_802_1x_clear_phase2_altsubject_matches (NMSetting8021x *setting);

Clears all "phase 2" altSubjectName matches.

-

Parameters

+

Parameters

@@ -2416,6 +2477,33 @@ nm_setting_802_1x_clear_phase2_altsubject_matches
+

nm_setting_802_1x_get_phase2_domain_suffix_match ()

+
const char *
+nm_setting_802_1x_get_phase2_domain_suffix_match
+                               (NMSetting8021x *setting);
+
+

Parameters

+
+++++ + + + + + +

setting

the NMSetting8021x

 
+
+
+

Returns

+

the “phase2-domain-suffix-match” property.

+
+

Since: 1.2

+ +
+

nm_setting_802_1x_get_phase2_client_cert_scheme ()

NMSetting8021xCKScheme
 nm_setting_802_1x_get_phase2_client_cert_scheme
@@ -2426,7 +2514,7 @@ returned scheme is NM_SETTING_802_1X_CK_SCHEME_PATH, use
 nm_setting_802_1x_get_client_cert_path().

 

-
Parameters

+
Parameters

 
@@ -2441,21 +2529,21 @@ returned scheme is 
-
Returns

+
Returns
 scheme used to store the "phase 2" client certificate (blob or path)

 
nm_setting_802_1x_get_phase2_client_cert_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_phase2_client_cert_blob
                                (NMSetting8021x *setting);

 
Client certificates are used to identify the connecting client to the network
 when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
 authentication method.

 

-
Parameters

+
Parameters

 

 
 

 
 
 
 
 
@@ -2470,7 +2558,7 @@ authentication method.

 
 

 

 

 

-
Returns

+
Returns

 
 the "phase 2" client certificate data. 

 
[transfer none]

 

@@ -2485,7 +2573,7 @@ nm_setting_802_1x_get_phase2_client_cert_path
 when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
 authentication method.

 

-
Parameters

+
Parameters

 
@@ -2500,20 +2588,20 @@ authentication method.

 
 

 

 

 

-
Returns

+
Returns

 
 path to the "phase 2" client certificate file

nm_setting_802_1x_set_phase2_client_cert ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_phase2_client_cert
                                (NMSetting8021x *setting,
                                 const char *cert_path,
                                 NMSetting8021xCKScheme scheme,
                                 NMSetting8021xCKFormat *out_format,
-                                GError **error);

+                                GError **error);

Reads a certificate from disk and sets the “phase2-client-cert” property with the raw certificate data if using the NM_SETTING_802_1X_CK_SCHEME_BLOB scheme, or with the path to the certificate @@ -2522,7 +2610,7 @@ file if using the

-

Parameters

+

Parameters

@@ -2541,7 +2629,7 @@ authentication method.

is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" client certificate file (PEM, DER, or PKCS#12 format). The path must be UTF-8 -encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with +encoded; use g_filename_to_utf8() to convert if needed. Passing NULL with any scheme clears the "phase2" client certificate.

@@ -2565,8 +2653,8 @@ clears the "phase2" client certificate.

 
-

Returns

-

TRUE if the operation succeeded, FALSE if it was unsuccessful

+

Returns

+

TRUE if the operation succeeded, FALSE if it was unsuccessful

@@ -2575,7 +2663,7 @@ clears the "phase2" client certificate.

const char *
 nm_setting_802_1x_get_password (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2590,7 +2678,7 @@ nm_setting_802_1x_get_password (
-

Returns

+

Returns

the password used by the authentication method, if any, as specified by the “password” property

@@ -2601,7 +2689,7 @@ by the NMSettingSecretFlags nm_setting_802_1x_get_password_flags (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2616,17 +2704,17 @@ nm_setting_802_1x_get_password_flags ( -

Returns

+

Returns

the NMSettingSecretFlags pertaining to the “password”

nm_setting_802_1x_get_password_raw ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_password_raw (NMSetting8021x *setting);

 

-
Parameters

+
Parameters
@@ -2641,7 +2729,7 @@ nm_setting_802_1x_get_password_raw (
-

Returns

+

Returns

the password used by the authentication method as a UTF-8-encoded array of bytes, as specified by the “password-raw” property.

@@ -2655,7 +2743,7 @@ UTF-8-encoded array of bytes, as specified by the nm_setting_802_1x_get_password_raw_flags (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2670,7 +2758,7 @@ nm_setting_802_1x_get_password_raw_flags
-

Returns

+

Returns

the NMSettingSecretFlags pertaining to the “password-raw”

@@ -2681,7 +2769,7 @@ nm_setting_802_1x_get_password_raw_flags 
const char *
 nm_setting_802_1x_get_pin (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2696,7 +2784,7 @@ nm_setting_802_1x_get_pin ( -

Returns

+

Returns

the PIN used by the authentication method, if any, as specified by the “pin” property

@@ -2707,7 +2795,7 @@ by the NMSettingSecretFlags nm_setting_802_1x_get_pin_flags (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2722,7 +2810,7 @@ nm_setting_802_1x_get_pin_flags (
-

Returns

+

Returns

the NMSettingSecretFlags pertaining to the “pin”

@@ -2739,7 +2827,7 @@ nm_setting_802_1x_get_private_key_scheme NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_client_cert_path().

-

Parameters

+

Parameters

@@ -2754,14 +2842,14 @@ nm_setting_802_1x_get_private_key_scheme
-

Returns

+

Returns

scheme used to store the private key (blob or path)

nm_setting_802_1x_get_private_key_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_private_key_blob
                                (NMSetting8021x *setting);

 
Private keys are used to authenticate the connecting client to the network
@@ -2771,7 +2859,7 @@ authentication method.

 unencrypted private key data may be readable by unprivileged users.  Private
 keys should always be encrypted with a private key password.

 

-
Parameters

+
Parameters

 
@@ -2786,7 +2874,7 @@ keys should always be encrypted with a private key password.

 
 

 

 

 

-
Returns

+
Returns

 
 the private key data. 

 
[transfer none]

 

@@ -2801,7 +2889,7 @@ nm_setting_802_1x_get_private_key_path
 when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x
 authentication method.

 

-
Parameters

+
Parameters

 
@@ -2816,20 +2904,20 @@ authentication method.

 
 

 

 

 

-
Returns

+
Returns

 
 path to the private key file

nm_setting_802_1x_set_private_key ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_private_key (NMSetting8021x *setting,
                                    const char *key_path,
                                    const char *password,
                                    NMSetting8021xCKScheme scheme,
                                    NMSetting8021xCKFormat *out_format,
-                                   GError **error);

+                                   GError **error);

Private keys are used to authenticate the connecting client to the network when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x authentication method.

@@ -2843,7 +2931,7 @@ verify that password is correct, and if it is, updates the “private-key-password” property with the given password . If -the decryption is unsuccessful, FALSE is returned, error +the decryption is unsuccessful, FALSE is returned, error is set, and no internal data is changed. If no password is given, the private key is @@ -2854,7 +2942,7 @@ unencrypted private key data using the BLOB scheme may be readable by unprivileged users. Private keys should always be encrypted with a private key password to prevent unauthorized access to unencrypted private key data.

-

Parameters

+

Parameters

@@ -2873,13 +2961,13 @@ key password to prevent unauthorized access to unencrypted private key data.

is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the private key file (PEM, DER, or PKCS#12 format). The path must be UTF-8 encoded; use -g_filename_to_utf8() to convert if needed. Passing NULL with any scheme +g_filename_to_utf8() to convert if needed. Passing NULL with any scheme clears the private key.

- @@ -2903,8 +2991,8 @@ an error is returned.

 

password

password used to decrypt the private key, or NULL if the password +

password used to decrypt the private key, or NULL if the password is unknown. If the password is given but fails to decrypt the private key, an error is returned.

  
-

Returns

-

TRUE if the operation succeeded, FALSE if it was unsuccessful

+

Returns

+

TRUE if the operation succeeded, FALSE if it was unsuccessful

@@ -2914,7 +3002,7 @@ an error is returned.

nm_setting_802_1x_get_private_key_password (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2929,7 +3017,7 @@ nm_setting_802_1x_get_private_key_password
-

Returns

+

Returns

the private key password used to decrypt the private key if previously set with nm_setting_802_1x_set_private_key(), or the “private-key-password” property.

@@ -2942,7 +3030,7 @@ previously set with NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2957,7 +3045,7 @@ nm_setting_802_1x_get_private_key_password_flags
-

Returns

+

Returns

the NMSettingSecretFlags pertaining to the “private-key-password”

@@ -2969,7 +3057,7 @@ nm_setting_802_1x_get_private_key_password_flags nm_setting_802_1x_get_private_key_format (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -2984,7 +3072,7 @@ nm_setting_802_1x_get_private_key_format
-

Returns

+

Returns

the data format of the private key data stored in the “private-key” property

@@ -3001,7 +3089,7 @@ scheme is NM_SETTING_802_1X_CK_SCHEME_PATH, use nm_setting_802_1x_get_client_cert_path().

-

Parameters

+

Parameters

@@ -3016,14 +3104,14 @@ scheme is -

Returns

+

Returns

scheme used to store the "phase 2" private key (blob or path)

nm_setting_802_1x_get_phase2_private_key_blob ()

-
GBytes *
+
GBytes *
 nm_setting_802_1x_get_phase2_private_key_blob
                                (NMSetting8021x *setting);

 
Private keys are used to authenticate the connecting client to the network
@@ -3033,7 +3121,7 @@ authentication method.

 unencrypted private key data may be readable by unprivileged users.  Private
 keys should always be encrypted with a private key password.

 

-
Parameters

+
Parameters
@@ -3048,7 +3136,7 @@ keys should always be encrypted with a private key password.

-

Returns

+

Returns

the "phase 2" private key data.

[transfer none]

@@ -3063,7 +3151,7 @@ nm_setting_802_1x_get_phase2_private_key_path when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x authentication method.

-

Parameters

+

Parameters

@@ -3078,21 +3166,21 @@ authentication method.

-

Returns

+

Returns

path to the "phase 2" private key file

nm_setting_802_1x_set_phase2_private_key ()

-
gboolean
+
gboolean
 nm_setting_802_1x_set_phase2_private_key
                                (NMSetting8021x *setting,
                                 const char *key_path,
                                 const char *password,
                                 NMSetting8021xCKScheme scheme,
                                 NMSetting8021xCKFormat *out_format,
-                                GError **error);

+                                GError **error);

Private keys are used to authenticate the connecting client to the network when EAP-TLS is used as either the "phase 1" or "phase 2" 802.1x authentication method.

@@ -3106,7 +3194,7 @@ verify that password is correct, and if it is, updates the “phase2-private-key-password” property with the given password -. If the decryption is unsuccessful, FALSE is returned, error +. If the decryption is unsuccessful, FALSE is returned, error is set, and no internal data is changed. If no password is given, the private @@ -3117,7 +3205,7 @@ thus unencrypted private key data using the BLOB scheme may be readable by unprivileged users. Private keys should always be encrypted with a private key password to prevent unauthorized access to unencrypted private key data.

-

Parameters

+

Parameters

@@ -3136,14 +3224,14 @@ key password to prevent unauthorized access to unencrypted private key data.

is set to either NM_SETTING_802_1X_CK_SCHEME_PATH or NM_SETTING_802_1X_CK_SCHEME_BLOB, pass the path of the "phase2" private key file (PEM, DER, or PKCS#12 format). The path must be UTF-8 encoded; -use g_filename_to_utf8() to convert if needed. Passing NULL with any +use g_filename_to_utf8() to convert if needed. Passing NULL with any scheme clears the private key.

- @@ -3167,8 +3255,8 @@ an error is returned.

 

password

password used to decrypt the private key, or NULL if the password +

password used to decrypt the private key, or NULL if the password is unknown. If the password is given but fails to decrypt the private key, an error is returned.

  
-

Returns

-

TRUE if the operation succeeded, FALSE if it was unsuccessful

+

Returns

+

TRUE if the operation succeeded, FALSE if it was unsuccessful

@@ -3178,7 +3266,7 @@ an error is returned.

nm_setting_802_1x_get_phase2_private_key_password (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -3193,7 +3281,7 @@ nm_setting_802_1x_get_phase2_private_key_password
-

Returns

+

Returns

the private key password used to decrypt the private key if previously set with nm_setting_802_1x_set_phase2_private_key() or the “phase2-private-key-password” property.

@@ -3206,7 +3294,7 @@ previously set with NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -3221,7 +3309,7 @@ nm_setting_802_1x_get_phase2_private_key_password_flags
-

Returns

+

Returns

the NMSettingSecretFlags pertaining to the “phase2-private-key-password”

@@ -3233,7 +3321,7 @@ nm_setting_802_1x_get_phase2_private_key_password_flags nm_setting_802_1x_get_phase2_private_key_format (NMSetting8021x *setting);
-

Parameters

+

Parameters

@@ -3248,7 +3336,7 @@ nm_setting_802_1x_get_phase2_private_key_format
-

Returns

+

Returns

the data format of the "phase 2" private key data stored in the “phase2-private-key” property

@@ -3408,6 +3496,12 @@ to a file containing the certificate or key data

+

NM_SETTING_802_1X_DOMAIN_SUFFIX_MATCH

+
#define NM_SETTING_802_1X_DOMAIN_SUFFIX_MATCH "domain-suffix-match"
+
+
+
+

NM_SETTING_802_1X_CLIENT_CERT

#define NM_SETTING_802_1X_CLIENT_CERT "client-cert"
@@ -3468,6 +3562,12 @@ to a file containing the certificate or key data

+

NM_SETTING_802_1X_PHASE2_DOMAIN_SUFFIX_MATCH

+
#define NM_SETTING_802_1X_PHASE2_DOMAIN_SUFFIX_MATCH "phase2-domain-suffix-match"
+
+
+
+

NM_SETTING_802_1X_PHASE2_CLIENT_CERT

#define NM_SETTING_802_1X_PHASE2_CLIENT_CERT "phase2-client-cert"
@@ -3555,7 +3655,7 @@ to a file containing the certificate or key data

Property Details

The “altsubject-matches” property

-
  “altsubject-matches”       GStrv
+
  “altsubject-matches”       GStrv

List of strings to be matched against the altSubjectName of the certificate presented by the authentication server. If the list is empty, no verification of the server certificate's altSubjectName is performed.

@@ -3564,7 +3664,7 @@ no verification of the server certificate's altSubjectName is performed.

The “anonymous-identity” property

-
  “anonymous-identity”       gchar *
+
  “anonymous-identity”       gchar *

Anonymous identity string for EAP authentication methods. Used as the unencrypted identity with EAP types that support different tunneled identity like EAP-TTLS.

@@ -3574,7 +3674,7 @@ identity like EAP-TTLS.

The “ca-cert” property

-
  “ca-cert”                  GBytes *
+
  “ca-cert”                  GBytes *

Contains the CA certificate if used by the EAP method specified in the “eap” property.

Certificate data is specified using a "scheme"; two are currently @@ -3592,7 +3692,7 @@ but this allows man-in-the-middle attacks and is NOT recommended.

The “ca-path” property

-
  “ca-path”                  gchar *
+
  “ca-path”                  gchar *

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the “ca-cert” property.

@@ -3602,7 +3702,7 @@ certificate specified in the

The “client-cert” property

-
  “client-cert”              GBytes *
+
  “client-cert”              GBytes *

Contains the client certificate if used by the EAP method specified in the “eap” property.

Certificate data is specified using a "scheme"; two are currently @@ -3617,8 +3717,21 @@ with the string "file://" and ending with a terminating NUL byte.

+

The “domain-suffix-match” property

+
  “domain-suffix-match”      gchar *
+

Constraint for server domain name. If set, this FQDN is used as a suffix +match requirement for dNSName element(s) of the certificate presented by +the authentication server. If a matching dNSName is found, this +constraint is met. If no dNSName values are present, this constraint is +matched against SubjectName CN using same suffix match comparison.

+

Flags: Read / Write

+

Default value: NULL

+

Since: 1.2

+
+
+

The “eap” property

-
  “eap”                      GStrv
+
  “eap”                      GStrv

The allowed EAP method to be used when authenticating to the network with 802.1x. Valid methods are: "leap", "md5", "tls", "peap", "ttls", "pwd", and "fast". Each method requires different configuration using the @@ -3629,7 +3742,7 @@ allowed combinations.

The “identity” property

-
  “identity”                 gchar *
+
  “identity”                 gchar *

Identity string for EAP authentication methods. Often the user's user or login name.

Flags: Read / Write

@@ -3638,7 +3751,7 @@ login name.

The “pac-file” property

-
  “pac-file”                 gchar *
+
  “pac-file”                 gchar *

UTF-8 encoded file path containing PAC for EAP-FAST.

Flags: Read / Write

Default value: NULL

@@ -3646,7 +3759,7 @@ login name.

The “password” property

-
  “password”                 gchar *
+
  “password”                 gchar *

UTF-8 encoded password used for EAP authentication methods. If both the “password” property and the “password-raw” property are specified, “password” is preferred.

@@ -3663,7 +3776,7 @@ property are specified,

The “password-raw” property

-
  “password-raw”             GBytes *
+
  “password-raw”             GBytes *

Password used for EAP authentication methods, given as a byte array to allow passwords in other encodings than UTF-8 to be used. If both the “password” property and the “password-raw” @@ -3680,7 +3793,7 @@ property are specified,

The “phase1-fast-provisioning” property

-
  “phase1-fast-provisioning” gchar *
+
  “phase1-fast-provisioning” gchar *

Enables or disables in-line provisioning of EAP-FAST credentials when FAST is specified as the EAP method in the “eap” property. Recognized values are "0" (disabled), "1" (allow unauthenticated @@ -3693,7 +3806,7 @@ wpa_supplicant documentation for more details.

The “phase1-peaplabel” property

-
  “phase1-peaplabel”         gchar *
+
  “phase1-peaplabel”         gchar *

Forces use of the new PEAP label during key derivation. Some RADIUS servers may require forcing the new PEAP label to interoperate with PEAPv1. Set to "1" to force use of the new PEAP label. See the @@ -3704,7 +3817,7 @@ wpa_supplicant documentation for more details.

The “phase1-peapver” property

-
  “phase1-peapver”           gchar *
+
  “phase1-peapver”           gchar *

Forces which PEAP version is used when PEAP is set as the EAP method in the “eap” property. When unset, the version reported by the server will be used. Sometimes when using older RADIUS servers, it @@ -3717,7 +3830,7 @@ version.

The “phase2-altsubject-matches” property

-
  “phase2-altsubject-matches” GStrv
+
  “phase2-altsubject-matches” GStrv

List of strings to be matched against the altSubjectName of the certificate presented by the authentication server during the inner "phase 2" authentication. If the list is empty, no verification of the @@ -3727,7 +3840,7 @@ server certificate's altSubjectName is performed.

The “phase2-auth” property

-
  “phase2-auth”              gchar *
+
  “phase2-auth”              gchar *

Specifies the allowed "phase 2" inner non-EAP authentication methods when an EAP method that uses an inner TLS tunnel is specified in the “eap” property. Recognized non-EAP "phase 2" methods are @@ -3740,7 +3853,7 @@ authentication; see the wpa_supplicant documentation for more details.

The “phase2-autheap” property

-
  “phase2-autheap”           gchar *
+
  “phase2-autheap”           gchar *

Specifies the allowed "phase 2" inner EAP-based authentication methods when an EAP method that uses an inner TLS tunnel is specified in the “eap” property. Recognized EAP-based "phase 2" methods are @@ -3753,7 +3866,7 @@ wpa_supplicant documentation for more details.

The “phase2-ca-cert” property

-
  “phase2-ca-cert”           GBytes *
+
  “phase2-ca-cert”           GBytes *

Contains the "phase 2" CA certificate if used by the EAP method specified in the “phase2-auth” or “phase2-autheap” properties.

@@ -3772,7 +3885,7 @@ but this allows man-in-the-middle attacks and is NOT recommended.

The “phase2-ca-path” property

-
  “phase2-ca-path”           gchar *
+
  “phase2-ca-path”           gchar *

UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the “phase2-ca-cert” property.

@@ -3782,7 +3895,7 @@ certificate specified in the

The “phase2-client-cert” property

-
  “phase2-client-cert”       GBytes *
+
  “phase2-client-cert”       GBytes *

Contains the "phase 2" client certificate if used by the EAP method specified in the “phase2-auth” or “phase2-autheap” properties.

@@ -3800,8 +3913,22 @@ but this allows man-in-the-middle attacks and is NOT recommended.

+

The “phase2-domain-suffix-match” property

+
  “phase2-domain-suffix-match” gchar *
+

Constraint for server domain name. If set, this FQDN is used as a suffix +match requirement for dNSName element(s) of the certificate presented by +the authentication server during the inner "phase 2" authentication. If +a matching dNSName is found, this constraint is met. If no dNSName +values are present, this constraint is matched against SubjectName CN +using same suffix match comparison.

+

Flags: Read / Write

+

Default value: NULL

+

Since: 1.2

+
+
+

The “phase2-private-key” property

-
  “phase2-private-key”       GBytes *
+
  “phase2-private-key”       GBytes *

Contains the "phase 2" inner private key when the “phase2-auth” or “phase2-autheap” property is set to "tls".

@@ -3827,7 +3954,7 @@ password used to decode the PKCS#12 private key and certificate.

The “phase2-private-key-password” property

-
  “phase2-private-key-password” gchar *
+
  “phase2-private-key-password” gchar *

The password used to decrypt the "phase 2" private key specified in the “phase2-private-key” property when the private key either uses the path scheme, or is a PKCS#12 format key. Setting this @@ -3849,18 +3976,20 @@ function.

The “phase2-subject-match” property

-
  “phase2-subject-match”     gchar *
+
  “phase2-subject-match”     gchar *

Substring to be matched against the subject of the certificate presented by the authentication server during the inner "phase 2" authentication. When unset, no verification of the authentication server -certificate's subject is performed.

+certificate's subject is performed. This property provides little security, +if any, and its use is deprecated in favor of +NMSetting8021x:phase2-domain-suffix-match.

Flags: Read / Write

Default value: NULL

The “pin” property

-
  “pin”                      gchar *
+
  “pin”                      gchar *

PIN used for EAP authentication methods.

Flags: Read / Write

Default value: NULL

@@ -3875,7 +4004,7 @@ certificate's subject is performed.

The “private-key” property

-
  “private-key”              GBytes *
+
  “private-key”              GBytes *

Contains the private key when the “eap” property is set to "tls".

Key data is specified using a "scheme"; two are currently supported: blob @@ -3905,7 +4034,7 @@ private key data.

The “private-key-password” property

-
  “private-key-password”     gchar *
+
  “private-key-password”     gchar *

The password used to decrypt the private key specified in the “private-key” property when the private key either uses the path scheme, or if the private key is a PKCS#12 format key. Setting this @@ -3926,18 +4055,20 @@ property.

The “subject-match” property

-
  “subject-match”            gchar *
+
  “subject-match”            gchar *

Substring to be matched against the subject of the certificate presented by the authentication server. When unset, no verification of the -authentication server certificate's subject is performed.

+authentication server certificate's subject is performed. This property +provides little security, if any, and its use is deprecated in favor of +NMSetting8021x:domain-suffix-match.

Flags: Read / Write

Default value: NULL

The “system-ca-certs” property

-
  “system-ca-certs”          gboolean
-

When TRUE, overrides the “ca-path” and +

  “system-ca-certs”          gboolean
+

When TRUE, overrides the “ca-path” and “phase2-ca-path” properties using the system CA directory specified at configure time with the --system-ca-path switch. The certificates in this directory are added to the verification chain in -- cgit 1.3.0-6-gf8a5