OLD | NEW |
1 # Open Network Configuration | 1 # Open Network Configuration |
2 | 2 |
3 [TOC] | 3 [TOC] |
4 | 4 |
5 ## Objective | 5 ## Objective |
6 | 6 |
7 We would like to create a simple, open, but complete format to describe | 7 We would like to create a simple, open, but complete format to describe |
8 multiple network configurations for WiFi, Ethernet, Cellular, | 8 multiple network configurations for WiFi, Ethernet, Cellular, |
9 Bluetooth/WiFi-Direct, and VPN connections in a single file format, in order | 9 Bluetooth/WiFi-Direct, and VPN connections in a single file format, in order |
10 to simplify and automate network configuration for users. | 10 to simplify and automate network configuration for users. |
(...skipping 1067 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1078 * Password of user. If not specified, defaults to prompting the user. | 1078 * Password of user. If not specified, defaults to prompting the user. |
1079 | 1079 |
1080 * **SaveCredentials** | 1080 * **SaveCredentials** |
1081 * (optional, defaults to *false*) - **boolean** | 1081 * (optional, defaults to *false*) - **boolean** |
1082 * If *false*, require user to enter credentials | 1082 * If *false*, require user to enter credentials |
1083 each time they connect. Specifying **Identity** | 1083 each time they connect. Specifying **Identity** |
1084 and/or **Password** when | 1084 and/or **Password** when |
1085 **SaveCredentials** is | 1085 **SaveCredentials** is |
1086 *false* is not allowed. | 1086 *false* is not allowed. |
1087 | 1087 |
| 1088 * **ServerCAPEMs** |
| 1089 * (optional) - **array of string** |
| 1090 * Non-empty list of CA certificates in PEM format, If this field is set, |
| 1091 **ServerCARef** and **ServerCARefs** must be unset. |
| 1092 |
1088 * **ServerCARefs** | 1093 * **ServerCARefs** |
1089 * (optional) - **array of string** | 1094 * (optional) - **array of string** |
1090 * Non-empty list of references to CA certificates in **Certificates** to be | 1095 * Non-empty list of references to CA certificates in **Certificates** to be |
1091 used for verifying the host's certificate chain. At least one of the CA | 1096 used for verifying the host's certificate chain. At least one of the CA |
1092 certificates must match. If this field is set, **ServerCARef** must be | 1097 certificates must match. If this field is set, **ServerCARef** must be |
1093 unset. If neither **ServerCARefs** nor **ServerCARef** is set, the client | 1098 unset. If neither **ServerCARefs** nor **ServerCARef** is set, the client |
1094 does not check that the server certificate is signed by a specific CA. | 1099 does not check that the server certificate is signed by a specific CA. |
1095 A verification using the system's CA certificates may still apply. | 1100 A verification using the system's CA certificates may still apply. |
1096 See **UseSystemCAs** for this. | 1101 See **UseSystemCAs** for this. |
1097 | 1102 |
(...skipping 703 matching lines...) Expand 10 before | Expand all | Expand 10 after Loading... |
1801 is transmitted or saved to disk should be secure. On client device, when | 1806 is transmitted or saved to disk should be secure. On client device, when |
1802 user names for connections that are user-specific are persisted to disk, | 1807 user names for connections that are user-specific are persisted to disk, |
1803 they should be stored in a location that is encrypted. Users can also opt in | 1808 they should be stored in a location that is encrypted. Users can also opt in |
1804 these cases to not save their user credentials in the config file and will | 1809 these cases to not save their user credentials in the config file and will |
1805 instead be prompted when they are needed. | 1810 instead be prompted when they are needed. |
1806 | 1811 |
1807 ## Authors | 1812 ## Authors |
1808 | 1813 |
1809 * pneubeck@chromium.org | 1814 * pneubeck@chromium.org |
1810 * stevenjb@chromium.org | 1815 * stevenjb@chromium.org |
OLD | NEW |