The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Fabian Mauchle <fabian.mauchle AT switch.ch>]

Hi all

The Realm 'Static connectivity tests' show some issues with our certificates 
(issued by QuoVadis), stating that the BasicConstaints extension is missing.  
 

I can't find any issues with this extension missing. RFC 5280 states that it 
"MAY appear [...] in end entity certificates". But there is no MUST (it's 
only mandatory for CA certs). Earlier revisions (RFC 2459) even once stated 
that it "SHOULD NOT appear in end entity certificates". Further, I could not 
reproduce the issues described (related to Mac OS X 10.8). My OS X 10.8 test 
client works perfectly well with this CAT configuration and certificate.

Best regards,
Fabian

-- 
SWITCH
Fabian Mauchle, Network Engineer
Werdstrasse 2, P.O. Box, 8021 Zurich, Switzerland
phone +41 44 268 15 30, direct +41 44 268 15 39
fabian.mauchle AT switch.ch,
 www.switch.ch