cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] Certificate Issue

From: Stefan Winter <stefan.winter AT restena.lu>
To: Robert Franklin <rcf34 AT cam.ac.uk>, Tomasz Wolniewicz <twoln AT umk.pl>
Cc: Ethan A Bateman <ebateman AT lsu.edu>, "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: Re: [[cat-users]] Certificate Issue
Date: Wed, 20 Jan 2016 12:52:46 +0100
Openpgp: id=AD3091F3AB24E05F4F722C03C0DE6A358A39DC66; url=http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Hi,

> Microsoft don't explain, in the above post, what the effect on chain
> certificates is, but I suspect they probably would be untrusted and trigger
> this problem.

The certificate itself is also signed with SHA-1. The signing process on
cat.eduroam.org for the resulting executable is IIRC signing with SHA-256.

The validation failure does not come from the intermediate, but from the
signing cert itself.

Please see my other post about more details on this.

Greetings,

Stefan Winter

--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature

[[cat-users]] Certificate Issue, Ethan A Bateman, 01/19/2016
- Re: [[cat-users]] Certificate Issue, Tomasz Wolniewicz, 01/19/2016
  - Re: [[cat-users]] Certificate Issue, Robert Franklin, 01/20/2016
    - Re: [[cat-users]] Certificate Issue, Stefan Winter, 01/20/2016
      - Re: [[cat-users]] Certificate Issue, Robert Franklin, 01/20/2016
        
        Re: [[cat-users]] Certificate Issue, Stefan Winter, 01/20/2016
        
        RE: [[cat-users]] Certificate Issue, Ethan A Bateman, 01/21/2016