WPA2-Enterprise and server certificate verification

2016-02-08 Thread Christian Hesse
Hello everybody, when networkmanager connects to a WPA/WPA2-Enterprise secured notwork it can check the validity of the server certificate against a CA certificate. Connecting to the authentication server does not include a domain name, though. So by default there is no way to check the certifica

Re: Problems with gobi 4000 connecting via QMI

2016-02-08 Thread Harald Jung
Hi, finally the notebook was sent to me and i have the same problems. I use a SIM which has been succesfully used in other notebooks. The problem is still the same: Feb 8 14:52:40 ThinClient NetworkManager[2243]: keyfile: add connection /etc/NetworkManager/system-connections/1&1 Mobile Broadba

Re: WPA2-Enterprise and server certificate verification

2016-02-08 Thread Dan Williams
On Mon, 2016-02-08 at 12:09 +0100, Christian Hesse wrote: > Hello everybody, > > when networkmanager connects to a WPA/WPA2-Enterprise secured notwork > it can > check the validity of the server certificate against a CA > certificate. > > Connecting to the authentication server does not include a

Re: Problems with gobi 4000 connecting via QMI

2016-02-08 Thread Dan Williams
On Mon, 2016-02-08 at 14:51 +0100, Harald Jung wrote: > Hi, > > finally the notebook was sent to me and i have the same problems. > I use a SIM which has been succesfully used in other notebooks. > The problem is still the same: > Are you 100% sure the APN used is correct? Also, does the SIM hav

Re: WPA2-Enterprise and server certificate verification

2016-02-08 Thread Christian Hesse
Dan Williams on Mon, 2016/02/08 10:21: > On Mon, 2016-02-08 at 12:09 +0100, Christian Hesse wrote: > > Hello everybody, > > > > when networkmanager connects to a WPA/WPA2-Enterprise secured notwork > > it can > > check the validity of the server certificate against a CA > > certificate. > > > >

Re: WPA2-Enterprise and server certificate verification

2016-02-08 Thread Christian Hesse
Christian Hesse on Mon, 2016/02/08 21:23: > > Yes, it's come up recently on bugzilla.gnome.org too and it should > > likely get added > > Ah, nice. Do you have a link for the bug? I did not find it... > And is anybody working on this? Uh, just found this one... https://bugzilla.gnome.org/show

Re: WPA2-Enterprise and server certificate verification

2016-02-08 Thread Dan Williams
On Mon, 2016-02-08 at 21:35 +0100, Christian Hesse wrote: > Christian Hesse on Mon, 2016/02/08 21:23: > > > Yes, it's come up recently on bugzilla.gnome.org too and it > > > should > > > likely get added > > > > Ah, nice. Do you have a link for the bug? I did not find it... > > And is anybody w

[PATCH] wifi: allow autoconnect on AP/AdHoc mode connections with manual IP configuration

2016-02-08 Thread Dan Williams
The existing checks assumed that all AP/AdHoc connections would use the shared IP method. But what we really want to check for here is whether the connection is AP/AdHoc. Leave the existing 'shared' check for backwards compatibility. Also move the check above the timestamp check, since the user

Re: Problems with gobi 4000 connecting via QMI

2016-02-08 Thread Harald Jung
yeah, its the vodafone apn i always use in my tests. It was running for weeks inside an arm based router with the same settings, before i took it back. The SIM has a PIN and was succesfully unlocked. Harald Am 08.02.2016 um 17:32 schrieb Dan Williams: On Mon, 2016-02-08 at 14:51 +0100, Harald