| OLD | NEW |
| 1 <!DOCTYPE html> | 1 <!DOCTYPE html> |
| 2 <html> | 2 <html> |
| 3 <head> | 3 <head> |
| 4 <meta charset="utf-8"> | 4 <meta charset="utf-8"> |
| 5 <link rel="stylesheet" href="onc_spec.css" > | 5 <link rel="stylesheet" href="onc_spec.css" > |
| 6 <script src="onc_spec.js"></script> | 6 <script src="onc_spec.js"></script> |
| 7 <title>Open Network Configuration Format</title> | 7 <title>Open Network Configuration Format</title> |
| 8 </head> | 8 </head> |
| 9 <body> | 9 <body> |
| 10 | 10 |
| (...skipping 1652 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 1663 <dt class="field">Remove</dt> | 1663 <dt class="field">Remove</dt> |
| 1664 <dd> | 1664 <dd> |
| 1665 <span class="field_meta"> | 1665 <span class="field_meta"> |
| 1666 (optional, defaults to <span class="value">false</span>) | 1666 (optional, defaults to <span class="value">false</span>) |
| 1667 <span class="type">boolean</span> | 1667 <span class="type">boolean</span> |
| 1668 </span> | 1668 </span> |
| 1669 If <span class="value">true</span>, remove this certificate (only GUID | 1669 If <span class="value">true</span>, remove this certificate (only GUID |
| 1670 should be set). | 1670 should be set). |
| 1671 </dd> | 1671 </dd> |
| 1672 | 1672 |
| 1673 <dt class="field">Trust</dt> | 1673 <dt class="field">TrustBits</dt> |
| 1674 <dd> | 1674 <dd> |
| 1675 <span class="field_meta"> | 1675 <span class="field_meta"> |
| 1676 (optional if <span class="field">Type</span> | 1676 (optional if <span class="field">Type</span> |
| 1677 is <span class="value">Server</span> | 1677 is <span class="value">Server</span> |
| 1678 or <span class="value">Authority</span>, otherwise ignored, defaults to | 1678 or <span class="value">Authority</span>, otherwise ignored, defaults to |
| 1679 []) | 1679 []) |
| 1680 <span class="type">array of string</span> | 1680 <span class="type">array of string</span> |
| 1681 </span> | 1681 </span> |
| 1682 A array of trust attributes. Trust can | 1682 An array of trust flags. Trust can include <span class="value">Web</span>. |
| 1683 include <span class="value">Web</span>. <span class="value">Web</span> | 1683 <span class="value">Web</span> implies that the certificate is to be |
| 1684 implies that the certificate is to be trusted for HTTPS SSL | 1684 trusted for HTTPS SSL identification. A typical web certificate authority |
| 1685 identification. A typical web certificate authority would | 1685 would have <span class="field">Type</span> set to |
| 1686 have <span class="field">Type</span> set to | 1686 <span class="value">Authority</span> |
| 1687 <span class="value">Authority</span> and <span class="field">Trust</span> | 1687 and <span class="field">TrustBits</span> set to |
| 1688 set to <span class="snippet">["Web"]</span>. | 1688 <span class="snippet">["Web"]</span>. |
| 1689 </dd> | 1689 </dd> |
| 1690 | 1690 |
| 1691 <dt class="field">Type</dt> | 1691 <dt class="field">Type</dt> |
| 1692 <dd> | 1692 <dd> |
| 1693 <span class="field_meta"> | 1693 <span class="field_meta"> |
| 1694 (required if <span class="field">Remove</span> is | 1694 (required if <span class="field">Remove</span> is |
| 1695 <span class="value">false</span>, otherwise ignored) | 1695 <span class="value">false</span>, otherwise ignored) |
| 1696 <span class="type">string</span> | 1696 <span class="type">string</span> |
| 1697 </span> | 1697 </span> |
| 1698 <span class="rule"> | 1698 <span class="rule"> |
| (...skipping 334 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 2033 }, | 2033 }, |
| 2034 "HiddenSSID": false, | 2034 "HiddenSSID": false, |
| 2035 "SSID": "MyTTLSNetwork", | 2035 "SSID": "MyTTLSNetwork", |
| 2036 "Security": "WPA-EAP" | 2036 "Security": "WPA-EAP" |
| 2037 } | 2037 } |
| 2038 } | 2038 } |
| 2039 ], | 2039 ], |
| 2040 "Certificates": [ | 2040 "Certificates": [ |
| 2041 { | 2041 { |
| 2042 "GUID": "{6ed8dce9-64c8-d568-d225d7e467e37828}", | 2042 "GUID": "{6ed8dce9-64c8-d568-d225d7e467e37828}", |
| 2043 "Trust": [], | |
| 2044 "Type": "Authority", | 2043 "Type": "Authority", |
| 2045 "X509": "MIIEpzCCA4+gAwIBAgIJAMueiWq5WEIAMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDV
QQGEwJGUjEPMA0GA1UECBMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wb
GUgSW5jLjEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ
2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTExMDEyODA2MjA0MFoXDTEyMDEyODA2MjA0MFowgZMxCzAJB
gNVBAYTAkZSMQ8wDQYDVQQIEwZSYWRpdXMxEjAQBgNVBAcTCVNvbWV3aGVyZTEVMBMGA1UEChMMRXhhb
XBsZSBJbmMuMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLmNvbTEmMCQGA1UEAxMdRXhhbXBsZ
SBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EDplh
yrVNJIoy1OsVqvD/K67B5PW2bDKKxGznodrzCu8jHsP1Ne3mgrK20vbzQUUBdmxTCWO6x3a3//r4ZuPO
uZd1ViycWjt6mRfRbBzNrHzP7NiyFuXjdlz74beHQQLcHwvZ3qFAWZK37uweiLiDPaMaEQlka2Bztqx4
PsogmSdoVPSCxi5Cl1XlJmITA03LlKpO79+0rEPRamWO/DMCwvffn2/UUjJLog4/lYe16HQ6iq/6bjhf
fm2rLXDFKOGZmBVbLNMCfANRMtdFWHYdBXERoUo2zpM9tduOOUNLy7E7kRKVm/wy38s51ChFPlpORrhi
mN2j1caar+KAv2tAgMBAAGjgfswgfgwHQYDVR0OBBYEFBTIImiXp+57jjgn2N5wq93GgAAtMIHIBgNVH
SMEgcAwgb2AFBTIImiXp+57jjgn2N5wq93GgAAtoYGZpIGWMIGTMQswCQYDVQQGEwJGUjEPMA0GA1UEC
BMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wbGUgSW5jLjEgMB4GCSqGS
Ib3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0a
G9yaXR5ggkAy56JarlYQgAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAnNd0YY7s2YVYP
sgEgDS+rBNjcQloTFWgc9Hv4RWBjwcdJdSPIrpBp7LSjC96wH5U4eWpQjlWbOYQ9RBq9Z/RpuAPEjzRV
78rIrQrCWQ3lxwywWEb5Th1EVJSN68eNv7Ke5BlZ2l9kfLRKFm5MEBXX9YoHMX0U8I8dPIXfTyevmKOT
1PuEta5cQOM6/zH86XWn6WYx3EXkyjpeIbVOw49AqaEY8u70yBmut4MO03zz/pwLjV1BWyIkXhsrtuJy
A+ZImvgLK2oAMZtGGFo7b0GW/sWY/P3R6Un3RFy35k6U3kXCDYYhgZEcS36lIqcj5y6vYUUVM732/etC
suOLz6ppw==" | 2044 "X509": "MIIEpzCCA4+gAwIBAgIJAMueiWq5WEIAMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDV
QQGEwJGUjEPMA0GA1UECBMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wb
GUgSW5jLjEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ
2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTExMDEyODA2MjA0MFoXDTEyMDEyODA2MjA0MFowgZMxCzAJB
gNVBAYTAkZSMQ8wDQYDVQQIEwZSYWRpdXMxEjAQBgNVBAcTCVNvbWV3aGVyZTEVMBMGA1UEChMMRXhhb
XBsZSBJbmMuMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLmNvbTEmMCQGA1UEAxMdRXhhbXBsZ
SBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EDplh
yrVNJIoy1OsVqvD/K67B5PW2bDKKxGznodrzCu8jHsP1Ne3mgrK20vbzQUUBdmxTCWO6x3a3//r4ZuPO
uZd1ViycWjt6mRfRbBzNrHzP7NiyFuXjdlz74beHQQLcHwvZ3qFAWZK37uweiLiDPaMaEQlka2Bztqx4
PsogmSdoVPSCxi5Cl1XlJmITA03LlKpO79+0rEPRamWO/DMCwvffn2/UUjJLog4/lYe16HQ6iq/6bjhf
fm2rLXDFKOGZmBVbLNMCfANRMtdFWHYdBXERoUo2zpM9tduOOUNLy7E7kRKVm/wy38s51ChFPlpORrhi
mN2j1caar+KAv2tAgMBAAGjgfswgfgwHQYDVR0OBBYEFBTIImiXp+57jjgn2N5wq93GgAAtMIHIBgNVH
SMEgcAwgb2AFBTIImiXp+57jjgn2N5wq93GgAAtoYGZpIGWMIGTMQswCQYDVQQGEwJGUjEPMA0GA1UEC
BMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wbGUgSW5jLjEgMB4GCSqGS
Ib3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0a
G9yaXR5ggkAy56JarlYQgAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAnNd0YY7s2YVYP
sgEgDS+rBNjcQloTFWgc9Hv4RWBjwcdJdSPIrpBp7LSjC96wH5U4eWpQjlWbOYQ9RBq9Z/RpuAPEjzRV
78rIrQrCWQ3lxwywWEb5Th1EVJSN68eNv7Ke5BlZ2l9kfLRKFm5MEBXX9YoHMX0U8I8dPIXfTyevmKOT
1PuEta5cQOM6/zH86XWn6WYx3EXkyjpeIbVOw49AqaEY8u70yBmut4MO03zz/pwLjV1BWyIkXhsrtuJy
A+ZImvgLK2oAMZtGGFo7b0GW/sWY/P3R6Un3RFy35k6U3kXCDYYhgZEcS36lIqcj5y6vYUUVM732/etC
suOLz6ppw==" |
| 2046 } | 2045 } |
| 2047 ] | 2046 ] |
| 2048 } | 2047 } |
| 2049 </pre> | 2048 </pre> |
| 2050 | 2049 |
| 2051 <p> | 2050 <p> |
| 2052 In this example, the client certificate is not sent in the ONC format, but | 2051 In this example, the client certificate is not sent in the ONC format, but |
| 2053 rather we send a certificate authority which we know will have signed the | 2052 rather we send a certificate authority which we know will have signed the |
| (...skipping 10 matching lines...) Expand all Loading... |
| 2064 server authentication. | 2063 server authentication. |
| 2065 </p> | 2064 </p> |
| 2066 | 2065 |
| 2067 <pre> | 2066 <pre> |
| 2068 { | 2067 { |
| 2069 "Type": "UnencryptedConfiguration", | 2068 "Type": "UnencryptedConfiguration", |
| 2070 "NetworkConfigurations": [], | 2069 "NetworkConfigurations": [], |
| 2071 "Certificates": [ | 2070 "Certificates": [ |
| 2072 { | 2071 { |
| 2073 "GUID": "{f31f2110-9f5f-61a7-a8bd7c00b94237af}", | 2072 "GUID": "{f31f2110-9f5f-61a7-a8bd7c00b94237af}", |
| 2074 "Trust": [ "Web" ], | 2073 "TrustBits": [ "Web" ], |
| 2075 "Type": "Authority", | 2074 "Type": "Authority", |
| 2076 "X509": "MIIEpzCCA4+gAwIBAgIJAMueiWq5WEIAMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDV
QQGEwJGUjEPMA0GA1UECBMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wb
GUgSW5jLjEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ
2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTExMDEyODA2MjA0MFoXDTEyMDEyODA2MjA0MFowgZMxCzAJB
gNVBAYTAkZSMQ8wDQYDVQQIEwZSYWRpdXMxEjAQBgNVBAcTCVNvbWV3aGVyZTEVMBMGA1UEChMMRXhhb
XBsZSBJbmMuMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLmNvbTEmMCQGA1UEAxMdRXhhbXBsZ
SBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EDplh
yrVNJIoy1OsVqvD/K67B5PW2bDKKxGznodrzCu8jHsP1Ne3mgrK20vbzQUUBdmxTCWO6x3a3//r4ZuPO
uZd1ViycWjt6mRfRbBzNrHzP7NiyFuXjdlz74beHQQLcHwvZ3qFAWZK37uweiLiDPaMaEQlka2Bztqx4
PsogmSdoVPSCxi5Cl1XlJmITA03LlKpO79+0rEPRamWO/DMCwvffn2/UUjJLog4/lYe16HQ6iq/6bjhf
fm2rLXDFKOGZmBVbLNMCfANRMtdFWHYdBXERoUo2zpM9tduOOUNLy7E7kRKVm/wy38s51ChFPlpORrhi
mN2j1caar+KAv2tAgMBAAGjgfswgfgwHQYDVR0OBBYEFBTIImiXp+57jjgn2N5wq93GgAAtMIHIBgNVH
SMEgcAwgb2AFBTIImiXp+57jjgn2N5wq93GgAAtoYGZpIGWMIGTMQswCQYDVQQGEwJGUjEPMA0GA1UEC
BMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wbGUgSW5jLjEgMB4GCSqGS
Ib3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0a
G9yaXR5ggkAy56JarlYQgAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAnNd0YY7s2YVYP
sgEgDS+rBNjcQloTFWgc9Hv4RWBjwcdJdSPIrpBp7LSjC96wH5U4eWpQjlWbOYQ9RBq9Z/RpuAPEjzRV
78rIrQrCWQ3lxwywWEb5Th1EVJSN68eNv7Ke5BlZ2l9kfLRKFm5MEBXX9YoHMX0U8I8dPIXfTyevmKOT
1PuEta5cQOM6/zH86XWn6WYx3EXkyjpeIbVOw49AqaEY8u70yBmut4MO03zz/pwLjV1BWyIkXhsrtuJy
A+ZImvgLK2oAMZtGGFo7b0GW/sWY/P3R6Un3RFy35k6U3kXCDYYhgZEcS36lIqcj5y6vYUUVM732/etC
suOLz6ppw==" | 2075 "X509": "MIIEpzCCA4+gAwIBAgIJAMueiWq5WEIAMA0GCSqGSIb3DQEBBQUAMIGTMQswCQYDV
QQGEwJGUjEPMA0GA1UECBMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wb
GUgSW5jLjEgMB4GCSqGSIb3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ
2VydGlmaWNhdGUgQXV0aG9yaXR5MB4XDTExMDEyODA2MjA0MFoXDTEyMDEyODA2MjA0MFowgZMxCzAJB
gNVBAYTAkZSMQ8wDQYDVQQIEwZSYWRpdXMxEjAQBgNVBAcTCVNvbWV3aGVyZTEVMBMGA1UEChMMRXhhb
XBsZSBJbmMuMSAwHgYJKoZIhvcNAQkBFhFhZG1pbkBleGFtcGxlLmNvbTEmMCQGA1UEAxMdRXhhbXBsZ
SBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9EDplh
yrVNJIoy1OsVqvD/K67B5PW2bDKKxGznodrzCu8jHsP1Ne3mgrK20vbzQUUBdmxTCWO6x3a3//r4ZuPO
uZd1ViycWjt6mRfRbBzNrHzP7NiyFuXjdlz74beHQQLcHwvZ3qFAWZK37uweiLiDPaMaEQlka2Bztqx4
PsogmSdoVPSCxi5Cl1XlJmITA03LlKpO79+0rEPRamWO/DMCwvffn2/UUjJLog4/lYe16HQ6iq/6bjhf
fm2rLXDFKOGZmBVbLNMCfANRMtdFWHYdBXERoUo2zpM9tduOOUNLy7E7kRKVm/wy38s51ChFPlpORrhi
mN2j1caar+KAv2tAgMBAAGjgfswgfgwHQYDVR0OBBYEFBTIImiXp+57jjgn2N5wq93GgAAtMIHIBgNVH
SMEgcAwgb2AFBTIImiXp+57jjgn2N5wq93GgAAtoYGZpIGWMIGTMQswCQYDVQQGEwJGUjEPMA0GA1UEC
BMGUmFkaXVzMRIwEAYDVQQHEwlTb21ld2hlcmUxFTATBgNVBAoTDEV4YW1wbGUgSW5jLjEgMB4GCSqGS
Ib3DQEJARYRYWRtaW5AZXhhbXBsZS5jb20xJjAkBgNVBAMTHUV4YW1wbGUgQ2VydGlmaWNhdGUgQXV0a
G9yaXR5ggkAy56JarlYQgAwDAYDVR0TBAUwAwEB/zANBgkqhkiG9w0BAQUFAAOCAQEAnNd0YY7s2YVYP
sgEgDS+rBNjcQloTFWgc9Hv4RWBjwcdJdSPIrpBp7LSjC96wH5U4eWpQjlWbOYQ9RBq9Z/RpuAPEjzRV
78rIrQrCWQ3lxwywWEb5Th1EVJSN68eNv7Ke5BlZ2l9kfLRKFm5MEBXX9YoHMX0U8I8dPIXfTyevmKOT
1PuEta5cQOM6/zH86XWn6WYx3EXkyjpeIbVOw49AqaEY8u70yBmut4MO03zz/pwLjV1BWyIkXhsrtuJy
A+ZImvgLK2oAMZtGGFo7b0GW/sWY/P3R6Un3RFy35k6U3kXCDYYhgZEcS36lIqcj5y6vYUUVM732/etC
suOLz6ppw==" |
| 2077 } | 2076 } |
| 2078 ] | 2077 ] |
| 2079 } | 2078 } |
| 2080 </pre> | 2079 </pre> |
| 2081 </section> | 2080 </section> |
| 2082 | 2081 |
| 2083 <section> | 2082 <section> |
| 2084 <h1>Encrypted format example</h1> | 2083 <h1>Encrypted format example</h1> |
| (...skipping 61 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
| 2146 is transmitted or saved to disk should be secure. On client device, when | 2145 is transmitted or saved to disk should be secure. On client device, when |
| 2147 user names for connections that are user-specific are persisted to disk, | 2146 user names for connections that are user-specific are persisted to disk, |
| 2148 they should be stored in a location that is encrypted. Users can also opt in | 2147 they should be stored in a location that is encrypted. Users can also opt in |
| 2149 these cases to not save their user credentials in the config file and will | 2148 these cases to not save their user credentials in the config file and will |
| 2150 instead be prompted when they are needed. | 2149 instead be prompted when they are needed. |
| 2151 </p> | 2150 </p> |
| 2152 </section> | 2151 </section> |
| 2153 </section> | 2152 </section> |
| 2154 </body> | 2153 </body> |
| 2155 </html> | 2154 </html> |
| OLD | NEW |