Confirmed; this needs further triage. I know for sure there is at least
one other bug about what certificates are accepted (and frankly we
should accept all the ones we possibly can, without need to convert).
There's some checking of whether the certificate is understandable
before passing it to the next layer (wpasupplicant or VPNs); and that's
usually what's failing rather than the next layer.
We should do a careful round of testing with various kinds of
certificates to make sure all the possibilities work.
Patrick; any chance you could provide a sample certificate built the
same way as the ones you use (though not the same certificate, for
obvious security reasons), so that we can get the actual format right?
It's a DER, but the headers in the text format are usually different
between actual formats.
** Changed in: network-manager (Ubuntu)
Status: New => Confirmed
** Changed in: network-manager (Ubuntu)
Importance: Undecided => Medium
** Tags added: nm-certs
--
You received this bug notification because you are a member of Desktop
Packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/884612
Title:
NM errors on DER-formatted WPA2-Enterprise certificate
Status in “network-manager” package in Ubuntu:
Confirmed
Bug description:
When using network-manager (0.8.4~git.20110319t175609.d14809b-
0ubuntu3) on Ubuntu 11.04 LTS to connect to a WPA2-Enterprise secured
wireless network, one is supposed to provide a SSL certificate (with
good reason!).
Network manager accepts all kind of certificate files, alltough
selecting a DER cert will cause an error:
> OpenSSL: tls_connection_ca_cert - Failed to load root certificates
> error:00000000:lib(0):func(0):reason(0)
> TLS: Failed to set TLS connection parameters
network manager should only accept PEM certificates OR automagically
convert DER certificates to PEM.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/network-manager/+bug/884612/+subscriptions
--
Mailing list: https://launchpad.net/~desktop-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~desktop-packages
More help : https://help.launchpad.net/ListHelp