# Workaround for LP#445487
# https://bugs.launchpad.net/ubuntu/+source/network-manager-applet/+bug/445487
#
# save this file to /etc/NetworkManager/system-connections/MY_CONNECTION_NAME
# chmod 600 $FILE
# chown root:root $FILE
# change everything prefixed with "MY"
# even I called my Files .pem, please convert "client-cert and" "private-key" to pkcs12 files:
#   openssl pkcs12 -export -inkey mykey.pem -in mycert.pem -certfile ca.pem  -out my_pkcs12.p12
# use the import password as "private-key-password". 
# For the file mykey.pem I didn't use a password as I am already using the import-password
#
# Maybe it is necessary to remove the comments in this connection file
# restart networkmanager to activate this file: /etc/init.d/network-manager restart
[connection]
id=MY_CONNECTION_NAME
uuid=b09520d3-91c0-4029-9bf0-7b00ddd33868
type=802-11-wireless
autoconnect=false
timestamp=0

[802-1x]
eap=tls;
identity=MYHOST.MYDOMAIN.net
# Here are fixed filenames. Just create them as symlinks to point to your correct files wherever they are stored
# /etc/NetworkManager/ca.pem
ca-cert=102;105;108;101;58;47;47;47;101;116;99;47;78;101;116;119;111;114;107;77;97;110;97;103;101;114;47;99;97;46;112;101;109;0;
# /etc/NetworkManager/key.pem (the same like "private-key" because of pkcs12)
client-cert=102;105;108;101;58;47;47;47;101;116;99;47;78;101;116;119;111;114;107;77;97;110;97;103;101;114;47;107;101;121;46;112;101;109;0;
# /etc/NetworkManager/key.pem
private-key=102;105;108;101;58;47;47;47;101;116;99;47;78;101;116;119;111;114;107;77;97;110;97;103;101;114;47;107;101;121;46;112;101;109;0;
private-key-password=MYPASSWORD
system-ca-certs=false
pkcs11-slot=0

[ipv4]
method=auto
ignore-auto-routes=false
ignore-auto-dns=false
dhcp-send-hostname=false
never-default=false

[ipv6]
method=ignore
ignore-auto-routes=false
ignore-auto-dns=false
never-default=false

[802-11-wireless]
# the name of your SSID converted according http://projects.gnome.org/NetworkManager/developers/settings-spec-08.html
# you can use the network-connection-editor to convert a SSID on your own
# here the SSID is "DD"
ssid=68;68;
mode=infrastructure
channel=0
rate=0
tx-power=0
mtu=0
security=802-11-wireless-security

[802-11-wireless-security]
key-mgmt=wpa-eap
wep-tx-keyidx=0
wep-key-type=0