The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Deyan Stoykov <dstoykov AT uni-ruse.bg>]

Hi all,
Since the upgrade to CAT 1.1 I'm getting the following message when 
performing a realm connectivity test from our IdP admin page:

{red icon} The server certificate could not be verified to the root CA 
you configured in your profile!

I'm pretty sure our certificate setup is fine and none of the 
supplicants set up by CAT have any problems verifying the certificate.

Since first noticing this I have reissued the server certificate and 
included the authorityKeyIdentifier extension, but that didn't make a 
difference.

We are using a using a private CA exclusively for eduroam, based on the 
.cnf files shipped with FreeRADIUS 3, modified in accordance with the 
EAP certificate recommendations in the wiki.

If someone is interested in looking into this, I can provide more info.
Best regards,
Deyan

--
Deyan Stoykov, 
dstoykov AT uni-ruse.bg
ICT department
University of Ruse