The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> We are writing to report a problem detected with our users.
> 
> We are offering the installer from cat.eduroam.org website, and since
> January we detected how windows 7 and 8.1 pcs connection fails, curiosly
> If you use mac (version 10.10) or android mobiles, you can connect.
> Using SecureW2 client last version you can connect in Windows clients
> and our national support service confirm us how client used by eduroam
> was GPL version. We are checking how can be possible this, but now the
> users can't connect and we need support to confirm the problem and
> repair official installer. Was anyone reporting this problems?

I haven't heard any report to that effect.

Did the problem start on Jan 1? It's not impossible that Microsoft may
be enforcing new certificate requirements, and that your server or
intermediate CA certificate does not meet those new requirements.

If you use a different version of SecureW2 that may or may not hint to a
problem with our version - maybe the users who try that new version
simply do not enable the certificate checks properly in their manual
configuration.

It would be helpful if you could send me the server certificate and CA
certificate(s) by mail so I could take a closer look. Because I don't
get any certificate out of the EAP conversation for @upf.edu - maybe you
are using a Microsoft RADIUS server and it doesn't like my outer identity...

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
6, rue Richard Coudenhove-Kalergi
L-1359 Luxembourg

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature