The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Alberto Martínez <alberto_martinez AT deusto.es>]

Hi,

Today we changed our RADIUS server certificate from a "trustable" CA to one of our own. Needless to say, without CAT this would have been a nightmare.

What we did was:
1) Upload our CA cert to CAT along the old chain.

2) Send a message to users urging them to reconfigure their devices using CAT (for certificate rollover mostly)

3) Change the RADIUS server certificate

So today is being less stressful than I feared BUT
The Android app (uk.ac.swansea.eduroamcat) does a poor job for the easy transition. Instead of configuring every cert included in the profile it just took the first (the old) path and ignored the other root CA.

Have we done something wrong regarding the CA paths and the app? Is this the expected behaviour? Or is it a bug?

Thank you for the hard work :)

Regards,

Alberto