summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAgeFilesLines
* cert-chooser: refactor to delegate file/pkcs11 operations from NMACertChooserlr/pkcs11Thomas Haller2017-03-198-484/+370
| | | | | | | | | | | | | | | | | Previously, NMACertChooser::constructor() would re-inject the actual type based on the flags property, thus, instead of creating an instance of type NMACertChooser, it would create an NMAFileCertChooser or NMAPkcs11CertChooser. Don't do that. Don't delegate using inheritence and NMACertChooserClass, instead delegate using a vtable structure. Also, hide the actual implementation of NMACertChooser and NMACertChooserClass from public headers. This means, the classes cannot be subclassed, but that is something that is not planned to be supported (at least for the moment). Co-authored-by: Lubomir Rintel <lkundrak@v3.sk>
* wireless-security: make eap-tls use the NMACertificateChooserLubomir Rintel2017-03-1910-475/+403
| | | | | This makes it support PKCS#11 tokens for certificates and keys. Also, it supports PIN entry for the relevant objects.
* libnma: add the PKCS#11 capable certificate chooserLubomir Rintel2017-03-195-5/+631
| | | | | | | | | Default to it unless Gcr support is unavailable or an application indicateas it only supports certificates in plain files. This one is libnma only. The libnm-gtk can still utilize the NMAFileCertChooser. Since libnm-glib doesn't support PKCS#11 tokens it wouldn't make too much sense anyway.
* libnma: add certificate chooser buttonLubomir Rintel2017-03-194-4/+561
| | | | | Allows choosing a PKCS#11 token to select a certificate or a key from, optionally selecting one from a file system.
* libnma: add PKCS#11 object chooser dialogLubomir Rintel2017-03-196-4/+884
| | | | | Selects a key or a password from a PKCS#11 token and returns an URI. Allows unlocking the token with a PIN.
* libnma: add PKCS#11 login dialogLubomir Rintel2017-03-196-2/+434
| | | | | Unlock a PKCS#11 with a PIN. Will be useful for PKCS#11 certificate chooser.
* build: optionally build with the GCR supportLubomir Rintel2017-03-192-3/+77
| | | | | | | | | | | | | | This will be useful for the PKCS#11 token support. Unfortunatelly, GCR API is declared subject to change despite being in active use and not having changed in years. This is not a problem -- if GCR ever deprecates this API, chances are it will provide a certificate chooser too and we'll be just able to drop ours. It doesn't seem like happening anytime soon. Let's do an extensive check of how good the available GCR version is and disable it if it's not good enough. We'll provide a sensible fallback anyway.
* libnma: add a file certificate chooserLubomir Rintel2017-03-196-6/+497
| | | | | | | | This is a simple certificate chooser that allows selecting the certificate and key pair from plain files. This one is available from libnm-gtk too, otherwise the cert chooser interface alone would be useless.
* utils: move the key/cert file filters from wireless-securityLubomir Rintel2017-03-193-69/+65
| | | | | | They're going to be useful elsewhere. Co-authored-by: Thomas Haller <thaller@redhat.com>
* libnma: add a certificate picker interfaceLubomir Rintel2017-03-197-3/+1378
| | | | | | | | | | | | | A grid with certificate & key pair optionally with passwords. The idea is to provide reusable interface for the 802.1x and VPN plugins that can be backed by a simple file-base chooser or a PKCS#11 based chooser. The API is designed with possible future Gcr certificate chooser in mind. This is available from libnm-gtk too, since the wireless-security library will make use for it. It still resides in the libnma/ tree not to introduce complexity into how the tree is organized for the sake of a legacy component.
* libnma: fix a typoLubomir Rintel2017-03-191-1/+1
|
* wireless-security: replace a GtkTable with GtkGridLubomir Rintel2017-03-191-97/+75
| | | | Let's modernize the UI file a bit before we extend it.
* editor: drop use of deprecated NetworkManager APILubomir Rintel2017-03-192-26/+38
| | | | It provides a better error reporting too.
* libnma: add and use version macrosLubomir Rintel2017-03-195-6/+149
|
* build: better distcheckLubomir Rintel2017-03-191-1/+6
| | | | Ensure all features we support build without a warning.
* build: bump the version to 1.7, NetworkManager requirement to 1.8Lubomir Rintel2017-03-192-11/+7
| | | | We'll need the NetworkManager 1.8 functionality to get the PKCS#11 support.
* build: lock gtk versionLubomir Rintel2017-03-191-1/+1
| | | | ...so that we won't accidentally use features of newer Gtk version.
* build: fix a copy & paste errorLubomir Rintel2017-03-191-1/+1
|
* Updated Lithuanian translationAurimas Černius2017-03-181-33/+37
|
* Update Polish translationPiotr Drąg2017-03-161-41/+45
|
* merge: branch 'bg/wifi-check-permissions'Beniamino Galvani2017-03-162-103/+36
|\ | | | | | | Check permissions before showing 802.1x wifi new-connection dialog.
| * applet-device-wifi: return FALSE on failure of new_auto_connection() methodBeniamino Galvani2017-03-161-33/+19
| | | | | | | | | | If the permission check fails, we never run the callback: return FALSE so that the caller can free resources.
| * applet-device-wifi: remove unused functionsBeniamino Galvani2017-03-162-71/+0
| | | | | | | | | | They are not needed since commit 9b002809514a ("applet: remove usage of dbus-glib and private session D-Bus API").
| * applet: check permissions before showing 802.1x wifi dialog (CVE-2017-6590)Iain Lane2017-03-161-0/+18
|/ | | | | | | | | | | | | | | | | | | | | | In most places, we (or NM) check permissions before performing actions. One place we don't is when we need more information when connecting to and 802.1x network. In that case we pop up a dialog to ask for more information before initiaing the connection. The dialog contains a GTK+ filechooser. We don't want unprivileged users to have access to this as it allows opening files. Check for MODIFY_SYSTEM or MODIFY_OWN before showing the dialog for 802.1x connections. If the user doesn't have or can't get it, don't show the dialog. They wouldn't have been able to create the connection anyway. This fixes CVE-2017-6590. https://mail.gnome.org/archives/networkmanager-list/2017-March/msg00032.html https://bugs.launchpad.net/bugs/1668321 [bgalvani@redhat.com: changed commit subject line, added links]
* libnma,libnm-gtk: use package-aware gettext() macroBeniamino Galvani2017-03-142-10/+10
| | | | | | | | | gettext("str") expands to dcgettext(NULL, "str") which gets translations from the last used domain, while _("str") is equivalent to g_dgettext(GETTEXT_PACKAGE, "str") which uses the library's translations. https://bugzilla.gnome.org/show_bug.cgi?id=772362
* Updated Lithuanian translationAurimas Černius2017-03-131-779/+1016
|
* Update Kazakh translationBaurzhan Muftakhidinov2017-03-121-192/+258
|
* Update Catalan translationJordi Mas2017-03-111-170/+192
|
* Update Scottish Gaelic translationGNOME Translation Robot2017-03-091-736/+1652
|
* libnma/pygobject: libnma/NMA must use libnm/NM instead of legacy libraries1.7.0-devThomas Haller2017-03-071-1/+1
| | | | | | | | | | | | | | libnma uses libnm, and not libnm-util/libnm-glib. Hence, the python bindings must load "NM" and not "NMClient"/"NetworkManager". As it was, the generated bindings for libnma were unusable and loading them would fail with libnm-ERROR **: libnm-util symbols detected; Mixing libnm with libnm-util/libnm-glib is not supported https://bugzilla.gnome.org/show_bug.cgi?id=779153 Fixes: 76a12beac4e8692f30071169e11e2b521ec4eab7
* release: bump version to 1.4.7 (development)1.4.7-devLubomir Rintel2017-03-061-1/+1
|
* release: bump version to 1.4.61.4.6Lubomir Rintel2017-03-061-1/+1
|
* release: update NEWSLubomir Rintel2017-03-061-0/+16
|
* applet/trival: whitespaceThomas Haller2017-03-031-32/+32
|
* merge: branch 'lr/gtk-doc'Lubomir Rintel2017-03-0217-47/+158
|\
| * all: drop the "private API" commentslr/gtk-docLubomir Rintel2017-03-029-41/+0
| | | | | | | | It's not like we could change or drop the API.
| * libnma: add gtk-doc documentationLubomir Rintel2017-03-025-4/+121
| |
| * mobile-providers: fix a typoLubomir Rintel2017-03-022-2/+2
| |
| * libnma: add gtk-doc blocks here and thereLubomir Rintel2017-03-024-0/+35
|/ | | | | It doesn't really improve the documentation, but at least makes gtk-doc happy.
* Updated Danish translationAlan Mortensen2017-02-261-2/+2
|
* Updated Serbian translationМирослав Николић2017-02-262-1448/+2350
|
* Update Italian translationMilo Casagrande2017-02-171-786/+1551
|
* Fix Catalan translationJordi Mas2017-02-161-1/+1
|
* Updated Danish translationAlan Mortensen2017-02-111-437/+584
|
* build: no need to link nm-c-e/nm-a with src/utils/libutils-libnm.laThomas Haller2017-02-101-2/+0
| | | | | src/wireless-security/libwireless-security-libnm.la already links with src/utils/libutils-libnm.la, thus we have the symobols ready.
* build: add support for --enable-lto and --enable-ld-gc configure optionThomas Haller2017-02-103-4/+329
|
* gitignore: ignore test-suite.log test artifactThomas Haller2017-02-101-0/+1
|
* build: merge branch 'th/build-non-recursive-make-bgo778400'Thomas Haller2017-02-0924-766/+926
|\ | | | | | | https://bugzilla.gnome.org/show_bug.cgi?id=778400
| * build: don't dist generated *-resources.[hc] filesThomas Haller2017-02-091-12/+18
| | | | | | | | Fixes: a4fa0bf297dbb148bb8ca1818eacaaaef85c803a
| * build: add configure option --without-libnm-gtk to build without legacy libraryThomas Haller2017-02-092-10/+30
| | | | | | | | https://bugzilla.gnome.org/show_bug.cgi?id=760887
View Lorry Controller Status