FM / examples

/usr/share/doc/wpa_supplicant/examples

Name	Size	Mode	Actions
p2p/	-	0755	rm
60_wpa_supplicant	267	0755	edit dl rm
dbus-listen-preq.py	1718	0644	edit dl rm
dpp-nfc.py	42479	0644	edit dl rm
dpp-qrcode.py	4112	0644	edit dl rm
ieee8021x.conf	269	0644	edit dl rm
openCryptoki.conf	1144	0644	edit dl rm
p2p-action-udhcp.sh	1723	0755	edit dl rm
p2p-action.sh	2691	0755	edit dl rm
p2p-nfc.py	20298	0644	edit dl rm
plaintext.conf	133	0644	edit dl rm
udhcpd-p2p.conf	2932	0644	edit dl rm
wep.conf	170	0644	edit dl rm
wpa-psk-tkip.conf	181	0644	edit dl rm
wpa2-eap-ccmp.conf	284	0644	edit dl rm
wpas-dbus-new-getall.py	1767	0644	edit dl rm
wpas-dbus-new-signals.py	6085	0644	edit dl rm
wpas-dbus-new-wps.py	2229	0644	edit dl rm
wpas-dbus-new.py	4284	0644	edit dl rm
wps-ap-cli	1176	0755	edit dl rm
wps-nfc.py	15752	0644	edit dl rm

Edit: /usr/share/doc/wpa_supplicant/examples/openCryptoki.conf (1144B)

# EAP-TLS using private key and certificates via OpenSSL PKCS#11 engine and
# openCryptoki (e.g., with TPM token)

# This example uses following PKCS#11 objects:
# $ pkcs11-tool --module /usr/lib/opencryptoki/libopencryptoki.so  -O -l
# Please enter User PIN:
# Private Key Object; RSA
#   label:      rsakey
#   ID:         04
#   Usage:      decrypt, sign, unwrap
# Certificate Object, type = X.509 cert
#   label:      ca
#   ID:         01
# Certificate Object, type = X.509 cert
#   label:      cert
#   ID:         04

# Configure OpenSSL to load the PKCS#11 engine and openCryptoki module
pkcs11_engine_path=/usr/lib/engines/engine_pkcs11.so
pkcs11_module_path=/usr/lib/opencryptoki/libopencryptoki.so

network={
	ssid="test network"
	key_mgmt=WPA-EAP
	eap=TLS
	identity="User"

# use OpenSSL PKCS#11 engine for this network
	engine=1
	engine_id="pkcs11"

# select the private key and certificates based on ID (see pkcs11-tool
	# output above)
	key_id="4"
	cert_id="4"
	ca_cert_id="1"

# set the PIN code; leave this out to configure the PIN to be requested
	# interactively when needed (e.g., via wpa_gui or wpa_cli)
	pin="123456"
}

# EAP-TLS using private key and certificates via OpenSSL PKCS#11 engine and # openCryptoki (e.g., with TPM token) # This example uses following PKCS#11 objects: # $ pkcs11-tool --module /usr/lib/opencryptoki/libopencryptoki.so -O -l # Please enter User PIN: # Private Key Object; RSA # label: rsakey # ID: 04 # Usage: decrypt, sign, unwrap # Certificate Object, type = X.509 cert # label: ca # ID: 01 # Certificate Object, type = X.509 cert # label: cert # ID: 04 # Configure OpenSSL to load the PKCS#11 engine and openCryptoki module pkcs11_engine_path=/usr/lib/engines/engine_pkcs11.so pkcs11_module_path=/usr/lib/opencryptoki/libopencryptoki.so network={ ssid="test network" key_mgmt=WPA-EAP eap=TLS identity="User" # use OpenSSL PKCS#11 engine for this network engine=1 engine_id="pkcs11" # select the private key and certificates based on ID (see pkcs11-tool # output above) key_id="4" cert_id="4" ca_cert_id="1" # set the PIN code; leave this out to configure the PIN to be requested # interactively when needed (e.g., via wpa_gui or wpa_cli) pin="123456" }