From c4ecf2c5c63b10585b2ebfaad8703dec0515cddf Mon Sep 17 00:00:00 2001 From: James Prestwood Date: Mon, 7 Oct 2019 13:27:27 -0700 Subject: [PATCH] tools: ios_convert: embed certs rather than using paths --- tools/ios_convert.py | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/tools/ios_convert.py b/tools/ios_convert.py index 8aa10113..29a395ba 100755 --- a/tools/ios_convert.py +++ b/tools/ios_convert.py @@ -114,7 +114,7 @@ def write_network(network, root_ca_path): output += "EAP-Identity=anonymous\n" if root_ca_path: - output += "EAP-%s-CACert=%s\n" % (eap, root_ca_path) + output += "EAP-%s-CACert=embed:root_ca\n" % eap output += "EAP-%s-Phase2-Method=Tunneled-%s\n" % \ (eap, network.inner_eap) @@ -158,6 +158,11 @@ def write_network(network, root_ca_path): output += "\n" + if root_ca_path: + output += "[@pem@root_ca]\n" + with open(root_ca_path) as f: + output += f.read() + print("Provisioning network %s\n" % conf_file) if args.verbose: