freeRADIUS 3.0.4, NetworkManager 1.0.6-27.el7, and wpa_supplicant v2.0 client side cert issues?

[Stefan Winter]

Hi,

> Yes I know I can point it to the CA. The issue is that its is still
> using
> the global certs. This is not how it used to work. Either way, its not a
> radius issue. I did see on a forum something related to this. The big thing
> would be to see if you have the same versions that I listed in the start of
> the thread.

I'm using NetworkManager 1.0.6 on an openSUSE Leap 42.1 with KDE5's
"Plasma NM" applet.

> EAP-TLS work for you via NetworkManager?

I use EAP-TLS only on my Mac, so can't say if ait actually *works* on
this distro.

Earlier versions of KNetworkManager and Plasma NM ill-advisedly
defaulted to "Use System CA store". It took me and others quite a fight
in the bug tracking system to convince people that this is nonsense and
that this option a) shouldn't exist in the first place, but b) should
default to off if they really think they need to present this option.

That seems to have worked, as the UI currently does not present that option.

BTW, you didn't tell us which UI *you* are using in front of NM?

Greetings,

Stefan Winter

> 
> Ollie Teasley
> Linux Administrator
> ISMELL.SHOES, LLC
> 
> 
> On Wed, Feb 10, 2016 at 1:25 AM, Arran Cudbard-Bell <
> a.cudbardb at freeradius.org> wrote:
> 
>>
>>> On 9 Feb 2016, at 23:14, Stefan Winter <stefan.winter at restena.lu> wrote:
>>>
>>> And here is the screenshot, unless it gets scraped.
>>
>> PNGs and SVGs are allowed.  Wouldn't mind a copy of the original email so
>> I can figure out why the signature appears invalid.
>>
>> Arran Cudbard-Bell <a.cudbardb at freeradius.org>
>> FreeRADIUS development team
>>
>> FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
>>
>>
>> -
>> List info/subscribe/unsubscribe? See
>> http://www.freeradius.org/list/users.html
>>
> -
> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20160210/3394fcf4/attachment.sig>