Skip to content

[dj] ethernet: initial support for and tests of PKCS#11 token for 802.1x

David Jaša requested to merge dj/client_pkcs11 into master

Setup for tests of EAP/TLS and positive EAP/TLS tests for ethernet. SoftHSM is used as PKCS#11 provider similarly as in Lubo Rintel's How To: https://wiki.gnome.org/LubomirRintel/NMPkcs11

SoftHSM tends to break when tokens and object of same names are added and removed repeatedly so teardown is avoided and tokens or objects are only added when there are none of the same name.

TODO:

  • add negative tests verifying that meaningful errors are returned and/or correct creds are requested
  • add analogous tests for Wi-Fi
Edited by David Jaša

Merge request reports