The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Mischa Diehm <mischa.diehm AT unibas.ch>]

Hi

thanks for your quick answers. No I am not aware of any specific clients that won’t work after upgrading to >= 1024 DH. I actually checked our servers and we run with 1024-Bit since the beginning. I also found this as first hit in google:

https://community.jisc.ac.uk/blogs/8021x-clients-and-radius-server-supporting-bigger-diffie-hellman-dh-keys

sums it up perfectly and is really easy to find. And of course you are right this is not a cat-eduroam issue.. but really knowledgeable ppls here (;

cheers and thanks,

Mischa

--

Mischa Diehm | Network Operations Center (NOC)

UniBasel | UniRechenZentrum (URZ)

Klingebergstr. 70 | CH-4056 Basel

Tel. +41 61 267 2273 | http://urz.unibas.ch

From: "A.L.M.Buxey AT lboro.ac.uk" <A.L.M.Buxey AT lboro.ac.uk>
Date: Montag, 7. September 2015 18:05
To: Mischa Diehm <mischa.diehm AT unibas.ch>
Cc: Stefan Winter <stefan.winter AT restena.lu>, "cat-users AT geant.net" <cat-users AT geant.net>
Subject: Re: [cat-users] eduroam not working with El Capitan 10.11 Beta

Hi,

    what is the status of this?

    Do you think it would also make sense to describe how to configure the

    server side to be ready for this change plus all the implications for

    older devices that might need DH < 1024?

we havent had any known devices have issues since we moved to > 1024 DH key a few months back

are you aware of any devices that only work with DH < 1024?  

alan