Configure networks requiring a certificate.

ash/system/chromeos/network/network_state_notifier.cc

 // Copyright (c) 2012 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "ash/system/chromeos/network/network_state_notifier.h"
 
 #include "ash/shell.h"
 #include "ash/system/chromeos/network/network_observer.h"
 #include "ash/system/tray/system_tray_notifier.h"
 #include "base/string16.h"
@@ skipping 70 matching lines @@
         IDS_CHROMEOS_NETWORK_ERROR_IPSEC_PSK_AUTH_FAILED);
   }
   if (error == flimflam::kErrorIpsecCertAuthFailed) {
     return l10n_util::GetStringUTF16(
         IDS_CHROMEOS_NETWORK_ERROR_IPSEC_CERT_AUTH_FAILED);
   }
   if (error == flimflam::kErrorPppAuthFailed) {
     return l10n_util::GetStringUTF16(
         IDS_CHROMEOS_NETWORK_ERROR_PPP_AUTH_FAILED);
   }
+  if (error == shill::kErrorEapAuthenticationFailed ||
+      error == shill::kErrorEapLocalTlsFailed ||
+      error == shill::kErrorEapRemoteTlsFailed) {
+    return l10n_util::GetStringUTF16(
+        IDS_CHROMEOS_NETWORK_ERROR_IPSEC_CERT_AUTH_FAILED);

[pneubeck (no reviews), 2013/06/06 20:41:20]

These errors are not related to IPsec only.
Currently more the opposite is the case, WiFi with EAP can lead to these errors.

[stevenjb, 2013/06/07 03:44:58]

The message is "Failed to authenticate with provided certificate".
I renamed the ID to IDS_CHROMEOS_NETWORK_ERROR_CERT_AUTH_FAILED and combined the
ifs.
If Local/RemoteTlsFailed should have a different message, let me know what it
should (roughly) say.

[pneubeck (no reviews), 2013/06/07 12:05:47]

Could be put into a follow-up CL:

Looking at the shill code,
EapLocalTlsFailed coulde be "EAP-TLS authentication failed locally." and
EapRemoteTlsFailed coulde be "EAP-TLS authentication failed remotely."

Alternatively, we could fallback to a generic error message like "EAP(-TLS)
authentication failed."

To be completely certain about the errors' meaning, we could contact Paul
Stewart.

+  }
+
   if (StringToLowerASCII(error) ==
       StringToLowerASCII(std::string(flimflam::kUnknownString))) {
     return l10n_util::GetStringUTF16(IDS_CHROMEOS_NETWORK_ERROR_UNKNOWN);
   }
   return l10n_util::GetStringFUTF16(IDS_NETWORK_UNRECOGNIZED_ERROR,
                                     UTF8ToUTF16(error));
 }
 
 }  // namespace
 
@@ skipping 145 matching lines @@
     VLOG(2) << " Network: " << network->path();
     cached_state_[network->path()] = network->connection_state();
   }
   const NetworkState* default_network =
       NetworkHandler::Get()->network_state_handler()->DefaultNetwork();
   if (default_network && default_network->IsConnectedState())
     last_active_network_ = default_network->path();
 }
 
 }  // namespace ash