The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Denis Mirassou <denis.mirassou AT univ-tlse3.fr>]

Hello again,

...To say I solved this in the meantime.

The issue was that CAT doesn't recognized intermediate CA like TERENA SSL 3.

I uploaded the CA File from the issuer of TERENA SSL 3 : DigiCert 
Assured ID Root CA.

So I have now 2 CA Files.

And This worked.

Sorry for bothering...

Regards.

DM

On 03/11/2015 10:49, Denis Mirassou wrote:
> Hello,
>
> Our CA has recently changed (TERENA SSL 2 --> TERENA SSL 3).
> So I need to change CAT Profiles accordingly with this new CA.
>
> I have done it in the 'IdP wide settings' : OK
>
> But My Institution Profile get then invalid with theses mentions:
> EAP Types (in order of preference):
> PEAP-MSCHAPv2 Information needed!
>      CA Certificate File
>
> TTLS-MSCHAPv2 Information needed!
>      CA Certificate File
>
> TTLS-PAP Information needed!
>      CA Certificate File
>
>
> But the CA file is already uploaded in the IdP Wide Settings section !
>
> I tried several things:
> - Create a new profile from scratch
> - Upload CA File in the profile itself (This overrides IdP Wide settings)
> None of these are working.
>
> I am stucked.
>
> I joined some screenshots.
>
> Thanks for help.
>
> Regards,
>
> DM.
begin:vcard
fn:Denis Mirassou
n:Mirassou;Denis
org;quoted-printable;quoted-printable:Universit=C3=A9 Toulouse III Paul Sabatier;Direction des Syst=C3=A8mes d'Information
email;internet:denis.mirassou AT univ-tlse3.fr
title;quoted-printable:Infrastructure r=C3=A9seau
tel;work:05.61.36.60.05
note;quoted-printable:Support utilisateur:=0D=0A=
	Le Guichet Unique du Num=C3=A9rique (GUN)=0D=0A=
	http://www.univ-tlse3.fr/26778031/0/fiche___pagelibre/&RH=3DACCUEIL&RF=3D=
	1237303363338
url:http://www.univ-tlse3.fr/26778031/0/fiche___pagelibre/&RH=ACCUEIL&RF=1237303363338
version:2.1
end:vcard