1 Connman configuration file format
2 *********************************
4 Connman uses configuration files to provision existing services. Connman will
5 be looking for its configuration files at STORAGEDIR which by default points
6 to /var/lib/connman/. Configuration file names must not include other
7 characters than letters or numbers and must have a .config suffix.
8 Those configuration files are text files with a simple format and we typically
9 have one file per provisioned network.
15 These files can have an optional global entry describing the actual file.
16 The 2 allowed fields for that entry are:
17 - Name: Name of the network.
18 - Description: Description of the network.
19 - Protected: Configuration protection against being removed, modified or
20 overwritten by a Manager.ProvisionService() call. If unset, this value defaults
21 to TRUE, i.e. configs are protected by default.
24 Service entry [service_*]
25 =========================
27 Each provisioned service must start with the [service_*] tag. Replace * with
28 an identifier unique to the config file.
31 - Type: Service type. We currently only support wifi.
32 - Name: A string representation of an 802.11 SSID. If the SSID field is
33 present, the Name field is ignored.
34 - SSID: A hexadecimal representation of an 802.11 SSID. If the SSID field is
35 omitted, the Name field is used instead.
36 - EAP: EAP type. We currently only support tls, ttls or peap.
37 - CACertFile: File path to CA certificate file (PEM/DER).
38 - ClientCertFile: File path to client certificate file (PEM/DER).
39 - PrivateKeyFile: File path to client private key file (PEM/DER/PFX).
40 - PrivateKeyPassphrase: Password/passphrase for private key file.
41 - PrivateKeyPassphraseType: We only support the fsid passphrase type for now.
42 This is for private keys generated by using their own filesystem UUID as the
43 passphrase. The PrivateKeyPassphrase field is ignored when this field is set
45 - Identity: Identity string for EAP.
46 - Phase2: Phase2 (inner authentication with TLS tunnel) authentication method.
47 Prefix the value with "EAP-" to indicate the usage of an EAP-based inner
48 authentication method (should only be used with EAP = TTLS).
49 - Passphrase: RSN/WPA/WPA2 Passphrase
55 This is a configuration file for a network providing EAP-TLS, EAP-TTLS and
57 The respective SSIDs are tls_ssid, ttls_ssid and peap_ssid and the file name
59 Please note that the SSID entry is for hexadecimal encoded SSID (e.g. "SSID =
60 746c735f73736964"). If your SSID does not contain any exotic character then
61 you should use the Name entry instead (e.g. "Name = tls_ssid").
64 example@example:[~]$ cat /var/lib/connman/example.config
67 Description = Example network configuration
71 SSID = 746c735f73736964
73 CACertFile = /home/user/.certs/ca.pem
74 ClientCertFile = /home/user/devlp/.certs/client.pem
75 PrivateKeyFile = /home/user/.certs/client.fsid.pem
76 PrivateKeyPassphraseType = fsid
83 CACertFile = /home/user/.cert/ca.pem
91 CACertFile = /home/user/.cert/ca.pem