Skip to content

ifcfg-rh cannot load saved EAP TLS configurations when using p12 private key

If I create a new EAP TLS connection with a p12 private key, it uses the same file for both user cert and private key. The cert file path is never saved to the ifcfg file, so on attempting to reload the connection (reboot, or nmcli con reload), the connection isn't available and I get this message in the log:

ifcfg-rh: loading "/etc/sysconfig/network-scripts/ifcfg-test" fails: Missing certificate for EAP method 'tls'.

This is on Fedora 30.

Edited by James Hewitt
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information