The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,
  the trust is anchored at the root CA, no intermediates should be
listed in the selection box.
The "do not prompt" should be checked so that if a fake eduroam should
be found, the user should not be tempted to break the security warning
and connect.

  I will test your installers and try to find out what the problem can be.

Tomasz


W dniu 13.10.2015 o 22:23, Rob Ansaldo pisze:
> I don’t know if I am doing something wrong or if this is a side effect of 
> the CAT version 1.1, but we are attempting to update our CAT due to a 
> replacement of our RADIUS server certificate. I have uploaded the cert 
> chain to the CAT admin page and see that it successfully loaded the CA root 
> and both intermediate certificates, but when I run the resulting CAT for 
> Windows 7, the EAP properties page only show the root CA as trusted. One of 
> the intermediates is listed, but not trusted and the other intermediate is 
> not listed at all. The “Do not prompt user to authorize new servers or 
> trusted certificate authorities” box is checked, so the user is not 
> prompted to trust the others in the chain and subsequently fails to connect.
>
> Have I uploaded the certificates to the CAT admin page incorrectly, out of 
> order or some other mistake - or could this be a bug in the Windows 
> installer?
>
> This above is for inst_id=709.

-- 
Tomasz Wolniewicz    
          
twoln AT umk.pl
        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne       Information&Communication Technology 
Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576