|
|
902.
|
|
|
Specifies the allowed "phase 2" inner EAP-based authentication method when an EAP method that uses an inner TLS tunnel is specified in the "eap" property. Recognized EAP-based "phase 2" methods are "md5", "mschapv2", "otp", "gtc", and "tls". Each "phase 2" inner method requires specific parameters for successful authentication; see the wpa_supplicant documentation for more details.
|
|
|
|
|
(no translation yet)
|
|
|
|
Located in
../clients/common/settings-docs.h.in:69
|
|
|
903.
|
|
|
Contains the "phase 2" CA certificate if used by the EAP method specified in the "phase2-auth" or "phase2-autheap" properties. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.
|
|
|
|
|
Sadrži "phase 2" CA vjerodajnicu ako se koristi EAP način određen u "phase2-auth" ili "phase2-autheap" svojstvima. Podaci vjerodajnice su određeni upotrebom "sheme"; dvije su trenutno podržane blob i putanja. Kada se koristi blob shema (koja je kompatibilna s ranijim NM 0.7.x) to svojstvo bi trebalo postaviti za DER kôdirane podatke vjerodajnica. Kada se koristi shema putanje, to svojstvo bi se trebalo postaviti na potpunu UTF-8 kôdiranu putanju vjerodajnice, s prefiksom izraza "file://" i završetkom sa završnim nula bajtom. Ovo svojstvo se može ukloniti čak iako EAP način podržava CA vjerodajnice, ali to omogućuje man-in-the-middle napade i NIJE preporučljivo.
|
|
Translated by
gogo
|
|
|
|
Located in
../clients/common/settings-docs.c.in:70
|
|
|
904.
|
|
|
The password used to access the "phase2" CA certificate stored in "phase2-ca-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.
|
|
|
|
|
Lozinka korištena za pristup "phase 2" CA vjerodajnici pohranjenoj u "phase2-ca-cert" svojstvu. Ima samo smisla ako je vjerodajnica pohranjena na PKCS#11 tokenu koji zahtijeva prijavu.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:60
|
|
|
905.
|
|
|
Flags indicating how to handle the "phase2-ca-cert-password" property.
|
|
|
|
|
Oznake koje ukazuju kako rukovati "phase2-ca-cert-password" svojstvom.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:61
|
|
|
906.
|
|
|
UTF-8 encoded path to a directory containing PEM or DER formatted certificates to be added to the verification chain in addition to the certificate specified in the "phase2-ca-cert" property.
|
|
|
|
|
UTF-8 kôdirana putanja u direktoriju koji sadrži PEM ili DER oblikovane vjerodajnice koje se dodaju u lanac provjere kao dodatak određen vjerodajnici u "phase2-ca-cert" svojstvu.
|
|
Translated by
gogo
|
|
|
|
Located in
../clients/common/settings-docs.c.in:73
|
|
|
907.
|
|
|
Contains the "phase 2" client certificate if used by the EAP method specified in the "phase2-auth" or "phase2-autheap" properties. Certificate data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme (which is backwards compatible with NM 0.7.x) this property should be set to the certificate's DER encoded data. When using the path scheme, this property should be set to the full UTF-8 encoded path of the certificate, prefixed with the string "file://" and ending with a terminating NUL byte. This property can be unset even if the EAP method supports CA certificates, but this allows man-in-the-middle attacks and is NOT recommended.
|
|
|
|
|
Sadrži "phase 2" vjerodajnicu klijenta ako se koristi EAP način određen u "phase2-auth" ili "phase2-autheap" svojstvima. Podaci vjerodajnice su određeni upotrebom "sheme"; dvije su trenutno podržane blob i putanja. Kada se koristi blob shema (koja je kompatibilna s ranijim NM 0.7.x) to svojstvo bi trebalo postaviti za DER kôdirane podatke vjerodajnica. Kada se koristi shema putanje, to svojstvo bi se trebalo postaviti na potpunu UTF-8 kôdiranu putanju vjerodajnice, s prefiksom izraza "file://" i završetkom sa završnim nula bajtom. Ovo svojstvo se može ukloniti čak iako EAP način podržava CA vjerodajnice, ali to omogućuje man-in-the-middle napade i NIJE preporučljivo.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:63
|
|
|
908.
|
|
|
The password used to access the "phase2" client certificate stored in "phase2-client-cert" property. Only makes sense if the certificate is stored on a PKCS#11 token that requires a login.
|
|
|
|
|
Lozinka korištena za pristup "phase2" vjerodajnici klijenta pohranjenoj u "phase2-client-cert" svojstvu. Ima samo smisla ako je vjerodajnica pohranjena na PKCS#11 tokenu koji zahtijeva prijavu.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:64
|
|
|
909.
|
|
|
Flags indicating how to handle the "phase2-client-cert-password" property.
|
|
|
|
|
Oznake koje ukazuju kako rukovati "phase2-client-cert-password" svojstvom.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:65
|
|
|
910.
|
|
|
Constraint for server domain name. If set, this FQDN is used as a suffix match requirement for dNSName element(s) of the certificate presented by the authentication server during the inner "phase 2" authentication. If a matching dNSName is found, this constraint is met. If no dNSName values are present, this constraint is matched against SubjectName CN using same suffix match comparison.
|
|
|
|
|
Ograničenje za naziv domene poslužitelja. Ako je postavljeno, ovaj FQDN se koristi kao zahtjev podudaranja sufiksa za dNSName elemente vjerodajnice predstavljene poslužiteljem ovjere tijekom unutarnje "phase 2" ovjere. Ako je dNSName koji se podudara pronađen, to ograničenje je zadovoljeno. Ako nema prisutnih dNSName vrijednosti, to ograničenje se podudara protivno SubjectName CN koristeći iste sufikse usporedbe.
|
|
Translated by
gogo
|
|
|
|
Located in
../clients/common/settings-docs.c.in:77
|
|
|
911.
|
|
|
Contains the "phase 2" inner private key when the "phase2-auth" or "phase2-autheap" property is set to "tls". Key data is specified using a "scheme"; two are currently supported: blob and path. When using the blob scheme and private keys, this property should be set to the key's encrypted PEM encoded data. When using private keys with the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte. When using PKCS#12 format private keys and the blob scheme, this property should be set to the PKCS#12 data and the "phase2-private-key-password" property must be set to password used to decrypt the PKCS#12 certificate and key. When using PKCS#12 files and the path scheme, this property should be set to the full UTF-8 encoded path of the key, prefixed with the string "file://" and ending with a terminating NUL byte, and as with the blob scheme the "phase2-private-key-password" property must be set to the password used to decode the PKCS#12 private key and certificate.
|
|
|
|
|
Sadrži "phase 2" unutarnji privatni ključ kada je "phase2-auth" ili "phase2-autheap" svojstvo postavljeno u "tls". Podaci ključa su određeni upotrebom "sheme"; dvije su trenutno podržane blob i putanja. Kada se koristi blob shema i privatni ključevi, to svojstvo bi trebalo postaviti za ključeve šifrirane PEM podacima kôdiranja. Kada se koriste privatni ključevi sa shemom putanje, to svojstvo bi se trebalo postaviti na potpunu UTF-8 kôdiranu putanju ključa, s prefiksom izraza "file://" i završetkom sa završnim nula bajtom. Kada se koristi PKCS#12 format privatnih ključeva i blob shema, to svojstvo bi trebalo biti postavljeno na PKCS#12 podatke i "phase2-private-key-password" svojstvo mora biti postavljeno za korištenje lozinke za dekôdiranje PKCS#12 vjerodajnice i ključa. Kada se koriste PKCS#12 datoteke i shema putanje, to svojstvo bi se trebalo postaviti na potpunu UTF-8 kôdiranu putanju ključa, s prefiksom izraza "file://" i završetkom sa završnim nula bajtom, i s blob shemom "phase2-private-key-password" svojstvo mora biti postavljeno za korištenje lozinke za dekôdiranje PKCS#12 privatnog ključa i vjerodajnice.
|
|
Translated by
gogo
|
|
|
|
Located in
src/libnmc-setting/settings-docs.h.in:68
|
