[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
Hi all I just stumpled accross the very same issue At the moment i run network manager version: network-manager-gnome 1.2.6-0ubuntu0.16.04.4 so it should be fixed -> but I was unable to select my key.. I exported the key following and old HowTo to get wlan running in a linux pc as the company is running windows domains with wpa2 enterprise .. pfx=my_exported_cert.pfx openssl pkcs12 -in $pfx -out cacert.pem -cacerts -nokeys openssl pkcs12 -in $pfx -out cert.pem -clcerts -nokeys openssl pkcs12 -in $pfx -out key.pem -nocerts that generated all files required -> prior to that I had to request a new cert with exportable private keys on a windows pc .. key resulting key.pem was: file key.pem key.pem: ASCII text with header of: Bag Attributes localKeyID: 01 00 00 00 Microsoft CSP Name: Microsoft Strong Cryptographic Provider friendlyName: le-Auth_Ses_ClientUser_KNAPPD-0485e131-adac-48b4-bd80-417a8495e1f3 Key Attributes X509v3 Key Usage: 80 -BEGIN ENCRYPTED PRIVATE KEY- And I think that was the issue with this key: After converting the key to RSA format it worked for me and network manager detected it !. openssl rsa -in key.pem -out secure.key.key file secure.key.key secure.key.key: PEM RSA private key And now i an running my WPA2 enterprise WLAN :) regards Chewie -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
Has there been any progress on this bug? The spurious "unencrypted keys" message persists even in network-manager-gnome 1.2.6-0ubuntu0.16.04. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
Network-Manager Version 1.2.2-0ubuntu0.16.04.4 Linux Mint 18.1 based on Ubuntu 16.04 Same Problem. *.key File is invisible in the gui -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
Fresh installed 16.04.1 with updates: network-manager/xenial-proposed,now 1.2.4-0ubuntu0.16.04.01 amd64 network-manager-gnome/xenial-updates,now 1.2.0-0ubuntu0.16.04.4 amd64 I confirm the bug. I see an empty list when try to select private key file (privkey.pem) in 802.1x tab. The above mentioned workaround with dran from nautilus works with warning message about empty password (wrong). -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
The bug still occures within my machine. Wlan can not connect to WPA2 Enterprise. I got lots of "Unencrypted private keys are not secure."- messages, though my private key is encrypted. Network-manager is version 1.2.2-0ubuntu0.16.04.1. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
The message pops up like 20 times. Real fun to "just skip them". -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
MK, you can just skip the message -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
Same for me for the same Ubuntu and NM version. -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
I installed fresh Ubuntu 16.04, with network manager 1.2.2-0ubuntu0.16.04.1 and can still repro the issue - none of my p12 encrypted keys are showing up in the list. After dragging and dropping the key as suggested, I get message about "Unencrypted private keys being insecure". Any additional workarounds? -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
This bug was fixed in the package network-manager - 1.2.2-0ubuntu0.16.04.1 --- network-manager (1.2.2-0ubuntu0.16.04.1) xenial; urgency=medium * Rebase to upstream 1.2.2 release, patches: (LP: #1589557) - dnsmasq-vpn-dns-filtering.patch: updated - nm-change-dnsmasq-parameters.diff: updated - 0001-dns-use-DBus-to-make-dnsmasq-nameserver-changes.patch: dropped - lp1574347-re-read-link-type-if-the-name-changed.diff: dropped - libnm-Check-self-still-NMManager-or-not.patch: (LP: #1582301) - libnm-don-t-require-initialized-out_encrypted-argume.patch: (LP: #1575614) -- Aron XuSat, 04 Jun 2016 18:27:47 +0800 ** Changed in: network-manager (Ubuntu Xenial) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Released Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp
[Touch-packages] [Bug 1575614] Re: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication
@all, I'm amending this SRU to only .p12 files for which is confirmed working to allow the fix land in -updates, and opened Bug #1627903 for follow-ups of other types key files. ** Summary changed: - [SRU]Can't select secret key for TLS auth for 802.1X authentication + [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication ** Tags removed: verification-failed ** Tags added: verification-done verification-done-xenial -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to network-manager in Ubuntu. https://bugs.launchpad.net/bugs/1575614 Title: [SRU]Can't select p12 secret key for TLS auth for 802.1X authentication Status in NetworkManager: Fix Released Status in network-manager package in Ubuntu: Fix Released Status in network-manager-applet package in Ubuntu: Fix Released Status in network-manager source package in Xenial: Fix Committed Status in network-manager-applet source package in Xenial: Fix Released Bug description: [Impact] Users cannot select TLS certificate when connecting to a network that requires TLS type 802.1X authentication [Test case] STR: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wired connection 4. Go to 802.1x tab 5. Check the Use 802.1X checkbox 6. Choose TLS 7. Click on Secret key button 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty For wifi connection: 1. Click on Connections icon in status panel 2. Click on Edit connections 3. Select Wi-Fi connection 4. Go to Wi-Fi Security tab 5. Select WPA & WPA2 Enterprise in the drop-down list 6. Choose TLS 7. Click on (None) next to Private key 8. In file chooser navigate to the folder where key is located and try to select key file - the list is empty [Regression Potential] The fix is quite straight forward and the possibility of causing regression is limited. To manage notifications about this bug go to: https://bugs.launchpad.net/network-manager/+bug/1575614/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp