cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] iphone problem

From: José Manuel Macías <jmanuel.macias AT rediris.es>
Cc: "cat-users AT geant.net" <cat-users AT geant.net>
Subject: Re: [cat-users] iphone problem
Date: Mon, 17 Jun 2013 14:39:56 +0200
List-archive: <https://mail.geant.net/mailman/private/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>
Openpgp: url=http://pgp.rediris.es:11371/pks/lookup?op=vindex&search=0x196B3E869563EF53

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

El 14/06/13 16:07, Stefan Winter escribió:
> Hi,
>
>> I have uploaded a Terena certificate, but not a chain.
>
> Further to this, I've now added code into trunk (i.e. a 1.1
> version coming up later) which will visualise that it's a bad idea
> to upload a server cert at all, see attached screenshot.

Very nice work, indeed! Thanks Stefan!

Last week we had a hands-on eduroam CAT tutorial, and it seems this is
a common mistake... some institutions believe they have to put their
server certificate in there... even more common belief if they use a
self-signed CA... :(

I wonder if there are institutions right now with such configuration...

José Manuel.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.19 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iEYEARECAAYFAlG/A5wACgkQGWs+hpVj71NHyACgpN65HPuUY1o6FTcbyTVR7U5B
0KkAn0vkbCgNzKM7aGmsa7eYRGosTGNB
=oESf
-----END PGP SIGNATURE-----

Re: [cat-users] iphone problem, (continued)