The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> We have noticed our installer although published is now unavailable.
> 
> The information we are given is that the CA certificate file is missing.
> I have tried to remove and re-add this to no avail.

The screenshot shows that the CA you uploaded is an *intermediate* CA
(the blue circle "I" is the hint). This is not sufficient for device
configuration, the *root* CA that signed your intermediate CA is required.

Detecting this condition is a new feature of version 1.0.3:

- [FEATURE #1] introduce stricter CA check: EAP types are only marked as
               complete if at least one *root CA* was uploaded

Before that version, the installers were generated, but would not
install a trust anchor. This led to a possibly insecure config on the
user device, and pretty much mandated to pull such installers off of the
download area.

I believe the entry was pulled off the list only when you edited either
the inst-wide or profile settings, not before (the completion checks are
only run and take action when the admin touches the IdP configuration).

Greetings,

Stefan Winter


> 
>  
> 
> Can you help?
> 
>  
> 
>  
> 
> *Vinay Dhir*
> 
> *IT Engineering*
> 
> University of West London
> 
> *uwl.ac.uk*
> 
>  
> 
>  
> 
> T:  020 8231 2094
> 
> F:  020 8231 2402
> 
> E:  
> Vinay.dhir AT uwl.ac.uk
>  
> <mailto:Vinay.dhir AT uwl.ac.uk>
> 
>  
> 


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

Attachment: signature.asc
Description: OpenPGP digital signature