Confirmed; this needs further triage. I know for sure there is at least
one other bug about what certificates are accepted (and frankly we
should accept all the ones we possibly can, without need to convert).
There's some checking of whether the certificate is understandable
before passing it to the next layer (wpasupplicant or VPNs); and that's
usually what's failing rather than the next layer.

We should do a careful round of testing with various kinds of
certificates to make sure all the possibilities work.

Patrick; any chance you could provide a sample certificate built the
same way as the ones you use (though not the same certificate, for
obvious security reasons), so that we can get the actual format right?
It's a DER, but the headers in the text format are usually different
between actual formats.

** Changed in: network-manager (Ubuntu)
       Status: New => Confirmed

** Changed in: network-manager (Ubuntu)
   Importance: Undecided => Medium

** Tags added: nm-certs

-- 
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/884612

Title:
  NM errors on DER-formatted WPA2-Enterprise certificate

Status in “network-manager” package in Ubuntu:
  Confirmed

Bug description:
  When using network-manager (0.8.4~git.20110319t175609.d14809b-
  0ubuntu3) on Ubuntu 11.04 LTS to connect to a WPA2-Enterprise secured
  wireless network, one is supposed to provide a SSL certificate (with
  good reason!).

  Network manager accepts all kind of certificate files, alltough
  selecting a DER cert will cause an error:

  > OpenSSL: tls_connection_ca_cert - Failed to load root certificates
  > error:00000000:lib(0):func(0):reason(0)
  > TLS: Failed to set TLS connection parameters

  network manager should only accept PEM certificates OR automagically
  convert DER certificates to PEM.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/884612/+subscriptions

-- 
Mailing list: https://launchpad.net/~desktop-packages
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help   : https://help.launchpad.net/ListHelp

Reply via email to