https://bugs.kde.org/show_bug.cgi?id=407389

            Bug ID: 407389
           Summary: Unable to configure PEAP-EAP-TLS in the editor
           Product: plasma-nm
           Version: 5.15.5
          Platform: Archlinux Packages
                OS: Linux
            Status: REPORTED
          Severity: normal
          Priority: NOR
         Component: editor
          Assignee: jgrul...@redhat.com
          Reporter: u.ra...@gmail.com
  Target Milestone: ---

My company uses the not-so-popular PEAP-EAP-TLS for wired 802.1x security,
where the phase 2 auth is TLS. The connection editor does not allow for this,
and only lists MSCHAPv2, MD5, and GTC as phase 2 auth options.

It would be great if there was support for this in the editor, since it is
supported by the NetworkManager itself, i.e., the following semi-manually
crafted config file gets the connection up and running:

[connection]
id=Wired connection 1
uuid=324df8f5-49e5-3b33-af23-be59d14e45bf
type=ethernet
autoconnect-priority=-100
permissions=

[ethernet]
auto-negotiate=true
mac-address=xx:xx:xx:xx:xx
mac-address-blacklist=

[ipv4]
dns-search=
method=auto

[ipv6]
addr-gen-mode=stable-privacy
dns-search=
method=ignore

[802-1x]
eap=peap
identity=host/XXXXXXX.domain.local
ca-path=/etc/ssl/certs
phase1-peapver=0
phase2-autheap=tls
phase2-ca-path=/etc/ssl/certs
phase2-private-key=file:///etc/wpa_supplicant/XXXXXXXX.domain.local.p12
phase2-private-key-password=xxxxxxxxx

-- 
You are receiving this mail because:
You are watching all bug changes.

Reply via email to