cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [cat-users] eduroam not working with El Capitan 10.11 Beta

From: A.L.M.Buxey AT lboro.ac.uk
To: Ralf Paffrath <paffrath AT dfn.de>
Cc: cat-users AT geant.net, Ashokaditya Mohanty <ashokaditya AT icloud.com>
Subject: Re: [cat-users] eduroam not working with El Capitan 10.11 Beta
Date: Fri, 10 Jul 2015 14:34:47 +0000
List-archive: <http://mail.geant.net/pipermail/cat-users/>
List-id: "The mailing list for users of the eduroam Configuration Assistant Tool \(CAT\)" <cat-users.geant.net>

Hi,

> When negotiating a TLS/SSL connection with Diffie-Hellman key exchange,
> OS
> X El Capitan requires a 1024-bit group or larger. OS X El Capitan will
> not
> connect to a server that allows negotiation with a 512-bit or smaller
> group.

yep. we're getting ready an advisory for our UK admins about this
I noticed same behaviour a few weeks back with wpa_supplicant authentication
through a RADIATOR proxy to a FreeRADIUS end server.... FreeRADIUS
GIT repo updated to its 2048bit DH...

alan

[cat-users] eduroam not working with El Capitan 10.11 Beta, Ashokaditya Mohanty, 07/10/2015
- Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Tomasz Wolniewicz, 07/10/2015
  - Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Ashokaditya Mohanty, 07/10/2015
    - Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Ralf Paffrath, 07/10/2015
      - Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Ashokaditya Mohanty, 07/10/2015
        
        Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Stefan Winter, 07/11/2015
      - Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, A . L . M . Buxey, 07/10/2015
        
        Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Stefan Winter, 07/10/2015
        
        Re: [cat-users] eduroam not working with El Capitan 10.11 Beta, Stefan Winter, 07/16/2015