mirror of
https://gitlab.freedesktop.org/NetworkManager/NetworkManager.git
synced 2025-12-28 11:00:09 +01:00
8c35e96b60
To be backwards compatible clients need to handle both paths to private keys and the decrypted private key data, which is what used to get passed in the private-key and phase2-private-key attributes of the 802.1x setting. When moving a connection around between system-settings and user-settings, if the private key is decrypted data, the settings service needs to store that decrypted data somewhere so that the key can be sent to NM during the connection process. But we don't want to store the decrypted private key data, so we have to re-encrypt it (possibly generating a private key password if one wasn't sent with the decrypted data) and save it to disk, then send NM a path to that private key during connection. To help clients do this, and so that they don't have to carry around multiple crypto implementations depending on whether they want to use NSS or gnutls/gcrypt, add a helper to libnm-util. Furthermore, I misunderstood a bunch of stuff with crypto padding when writing the encrypt/decrypt functions long ago, so fix that up. Don't return padding as part of the decrypted data, and make sure to verify the padding's expected lengths and values when decrypting. Many thanks to Nalin Dahyabhai for pointing me in the right direction. |
||
|---|---|---|
| .. | ||
| tests | ||
| COPYING | ||
| crypto.c | ||
| crypto.h | ||
| crypto_gnutls.c | ||
| crypto_nss.c | ||
| libnm-util.pc.in | ||
| libnm-util.ver | ||
| Makefile.am | ||
| nm-connection.c | ||
| nm-connection.h | ||
| nm-param-spec-specialized.c | ||
| nm-param-spec-specialized.h | ||
| nm-setting-8021x.c | ||
| nm-setting-8021x.h | ||
| nm-setting-bluetooth.c | ||
| nm-setting-bluetooth.h | ||
| nm-setting-cdma.c | ||
| nm-setting-cdma.h | ||
| nm-setting-connection.c | ||
| nm-setting-connection.h | ||
| nm-setting-gsm.c | ||
| nm-setting-gsm.h | ||
| nm-setting-ip4-config.c | ||
| nm-setting-ip4-config.h | ||
| nm-setting-ip6-config.c | ||
| nm-setting-ip6-config.h | ||
| nm-setting-olpc-mesh.c | ||
| nm-setting-olpc-mesh.h | ||
| nm-setting-ppp.c | ||
| nm-setting-ppp.h | ||
| nm-setting-pppoe.c | ||
| nm-setting-pppoe.h | ||
| nm-setting-serial.c | ||
| nm-setting-serial.h | ||
| nm-setting-template.c | ||
| nm-setting-template.h | ||
| nm-setting-vpn.c | ||
| nm-setting-vpn.h | ||
| nm-setting-wired.c | ||
| nm-setting-wired.h | ||
| nm-setting-wireless-security.c | ||
| nm-setting-wireless-security.h | ||
| nm-setting-wireless.c | ||
| nm-setting-wireless.h | ||
| nm-setting.c | ||
| nm-setting.h | ||
| nm-utils-private.h | ||
| nm-utils.c | ||
| nm-utils.h | ||