The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

maybe worth investigating a bit.

Possibly *his* deployment needs the intermediate because something with
the root is not in order?

Could we have the root CA for further inspection?

Stefan

On 23.11.14 22:41, Tomasz Wolniewicz wrote:
> Hi,
>   I have run tests on EAPlab (http://eaplab.supplicants.net) for PEAP on
> OS X 10.10.1 and they do not confirm your findings.
> EAPlab implements both  single and chain CA cases, the default CAT
> profile installs only the root CA and authentications work fine.
>
> To be quite sure I also look at the downloaded server cert and OS X
> shows that the the server cert is issued by an unknown CA, this proves
> that the intermediate CA is not installed on my system.
>
> Tomasz
>
>
> W dniu 22.11.2014 o 13:58, Jenny Martin pisze:
>> Yosemite seems to need all the intermediate CA certificates in your
>> certificate chain included in the eduroam profile.  Previous versions of
>> MacOS X were happy with just the root CA certificate.   We found that
>> iOS 7 & 8 need all the certificates too.
>>
>> You can just add the intermediate certificates in you eduroamcat IdP
>> profile and rebuild the installers.
>>
>>
>

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature