<html> <head> <meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1"> <style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style> </head> <body dir="ltr"> <p style="font-family:Tahoma;font-size:8pt;color:#CF022B;margin:5pt;" align="Left"> </p> <br> <div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Hello,</div> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> I can't manage to get NetworkManager connection to a wired 802.1x connection using a PKCS#11 device to store the private key.</p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> The surprising thing is, I can make a WiFi similar setup work fine.</p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <br> </p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> Despite getting a wpa_supplicant-only setup fully working, I encounter the following error when trying the configuration with NM :</p> <blockquote style="margin-left: 0.8ex; padding-left: 1ex; border-left: 3px solid rgb(200, 200, 200);"> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">Secrets are required to access the wired network 'wired-tpm'</span></p> <div style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt; color: rgb(102, 102, 102);"> Warning: password for '802-1x.identity' not given in 'passwd-file' and nmcli cannot ask without '--ask' option.</div> <div style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt; color: rgb(102, 102, 102);"> Error: Connection activation failed: Secrets were required, but not provided</div> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> which is fully unexpected (the pin to access the private key is provided with the PKCS#11 URI used in the configuration), and I now from the wpa_supplicant test that i did provide the full list of parameters needed for the authentication to succeed.</p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <br> </p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> The configuration look similar to this :</p> <blockquote style="margin-left: 0.8ex; padding-left: 1ex; border-left: 3px solid rgb(200, 200, 200);"> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">[connection]</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">id=wired-tpm</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">uuid=09f60a46-daf1-3b8e-8c24-7a2ae3e48783</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">type=ethernet</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">autoconnect=false</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">autoconnect-priority=-100</span></p> <div style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt; color: rgb(102, 102, 102);"> <br> </div> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">[ethernet]</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">duplex=half</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">mtu=1420</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">speed=100</span></p> <div style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt; color: rgb(102, 102, 102);"> <br> </div> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">[802-1x]</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">ca-cert=/usr/share/ca-certificates/RadiusCA.pem</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">client-cert=/config/etc/swanctl/x509/client.pem</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">eap=tls;</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">identity=test</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">private-key=pkcs11:model=SLB9670%2525252500%2525252500%2525252500%2525252500%2525252500%2525252500%2525252500%2525252500%2525252500;manufacturer=Infineon;serial=0000000000000000;token=tpm2-token;id=%42%42;type=private;pin-value=<0000>"</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">private-key-password=</span></p> <div style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt; color: rgb(102, 102, 102);"> <br> </div> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">[ipv4]</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">address1=192.168.1.4/24</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">address2=192.168.1.5/24</span></p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <span style="color: rgb(102, 102, 102);">method=manual</span></p> </blockquote> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <br> </p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> Any documentation, help or experience regarding this kind of setup would be help !</p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <br> </p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> <br> </p> <p style="margin-top: 0px; margin-bottom: 0px; font-family: Aptos; font-size: 11pt;" class="elementToProof"> I have opened a full issue with more details :</p> <div class="elementToProof" style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <a href="https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1773" id="LPlnk406359" class="OWAAutoLink">https://gitlab.freedesktop.org/NetworkManager/NetworkManager/-/issues/1773</a></div> <div id="Signature"> <div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Regards,</div> <div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);"> Marc<br> </div> </div> </div> <br> <p style="font-family:Tahoma;font-size:9pt;color:#CF022B;margin:5pt;" align="Left"> C2 – Usage restreint<br> </p> </body> </html>