The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,
  I have run tests on EAPlab (http://eaplab.supplicants.net) for PEAP on
OS X 10.10.1 and they do not confirm your findings.
EAPlab implements both  single and chain CA cases, the default CAT
profile installs only the root CA and authentications work fine.

To be quite sure I also look at the downloaded server cert and OS X
shows that the the server cert is issued by an unknown CA, this proves
that the intermediate CA is not installed on my system.

Tomasz


W dniu 22.11.2014 o 13:58, Jenny Martin pisze:
> Yosemite seems to need all the intermediate CA certificates in your
> certificate chain included in the eduroam profile.  Previous versions of
> MacOS X were happy with just the root CA certificate.   We found that
> iOS 7 & 8 need all the certificates too.
>
> You can just add the intermediate certificates in you eduroamcat IdP
> profile and rebuild the installers.
>
>