The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

["Angel, Judy" <admyet4 AT herts.ac.uk>]

After the windows7 install you are prompted to reboot the laptop. That is not 
the case for windows . I am not a windows 8 user, and have only tested with 
two W8 devices but I rebooted and had to make a few login attempt before it 
worked. The username pops up very quickly without connecting the radius 
server at all, and then suddenly all starts working.  Have you had a similar 
experience?
Thanks
Judy

-----Original Message-----
From: Stefan Winter 
[mailto:stefan.winter AT restena.lu]
 
Sent: 19 June 2013 09:07
To: Mailcon2
Cc: Tomasz Wolniewicz; Mailcon2; 
cat-users AT geant.net
Subject: Re: [cat-users] iphone problem

Hi,

> Problem resolved once the radius server certificate was the Terena 
> certificate, matching  the one uploaded to cat,  which was generated on a 
> solaris box by default now SHA-1.
> Thank you very much for all your assistance. The tool is going to make 
> eduroam world a better place and will enable rollout to the whole campus.  
> Much appreciated.

Further to this, I have worked on eduroam CAT's "trunk" code which will 
eventually become 1.1. During the reachability checks, it can now inspect the 
server cert much more thoroughly. The list of error conditions now reported 
about are:

                CERTPROB_ROOT_INCLUDED
                CERTPROB_TOO_MANY_SERVER_CERTS
                CERTPROB_NO_SERVER_CERT
                CERTPROB_MD5_SIGNATURE_SERVER
                CERTPROB_MD5_SIGNATURE_INTERMEDIATE
                CERTPROB_NO_TLS_WEBSERVER_OID
                CERTPROB_NO_CDP_URL
                CERTPROB_NO_CRL_AT_CDP_URL

and will be complemented later by the check whether the server cert actually 
matches the root cert that was uploaded to CAT.

Greetings,

Stefan Winter