Skip to content

Conversation

@fredrikfoss
Copy link
Contributor

As specified in iwd.network(5) under Network Authentication Settings, multiple server domain masks should be separated by semicolons, not colons.

            ├───────────────────────────────┼────────────────────────────┤
            │EAP-TLS-ServerDomainMask,      │ string A mask for the      │
            │EAP-TTLS-ServerDomainMask,     │ domain names contained in  │
            │EAP-PEAP-ServerDomainMask      │ the server's certificate.  │
            │                               │ At least one of the domain │
            │                               │ names present in the       │
            │                               │ certificate's Subject      │
            │                               │ Alternative Name           │
            │                               │ extension's DNS Name       │
            │                               │ fields or the Common Name  │
            │                               │ has to match at least one  │
            │                               │ mask, or authentication    │
            │                               │ will fail.  Multiple masks │
            │                               │ can be given separated by  │
            │                               │ semicolons.  The masks are │
            │                               │ split into segments at the │
            │                               │ dots.  Each segment has to │
            │                               │ match its corresponding    │
            │                               │ label in the domain name.  │
            │                               │ An asterisk segment in the │
            │                               │ mask matches any label.    │
            │                               │ An asterisk segment at the │
            │                               │ beginning of the mask      │
            │                               │ matches one or more        │
            │                               │ consecutive labels from    │
            │                               │ the beginning of the       │
            │                               │ domain string.             │
            ├───────────────────────────────┼────────────────────────────┤

As specified in iwd.network(5) under Network Authentication Settings,
multiple server domain masks should be separated by semicolons, not
colons.
@twoln twoln merged commit 1b57e8e into GEANT:master Jan 1, 2026
1 of 2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants