Skip to Content.

cat-users - Re: [[cat-users]] The new signature on mobileconfig files

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive


Re: [[cat-users]] The new signature on mobileconfig files


Chronological Thread 
  • From: Tomasz Wolniewicz <twoln AT umk.pl>
  • To: Alan Buxey <A.L.M.Buxey AT lboro.ac.uk>, Patrik Holmqvist <patrik.holmqvist AT su.se>, Hans Berggren <hansb AT kth.se>
  • Cc: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
  • Subject: Re: [[cat-users]] The new signature on mobileconfig files
  • Date: Tue, 23 Feb 2016 20:22:21 +0100

Hi,
  I have tested what happens on iOS when I install a profile with an already expired signing certificate and except for some warnings during the installation it seems that all is fine.

  However a reinstallation of the profile, if peformed by a user, may be less trivial then one might think. In the old times the the profile was replaced when another one with the same name was installed, then Apple changed approach and they now depend on the UUID value in the profile. When it become obvious that instillation of a new profile was not deleting the previous one we have changed the algorithm for the profile generation, but if people have some relay old profiles then after an installation of the new profile they can end up with two. They could then manually remove the untrusted profile, but unfortunately this is an extra task they should perform.

Tiomasz


W dniu 23.02.2016 o 19:35, Alan Buxey pisze:
Hmmm. Well I've announced this issue to the UK community anyway. Better to highlight it so any client weirdness doesn't come out of the blue

So. We're going to have clients that don't trust the profile. What happens then is down to the device and various other settings - user gets prompted about untrusted profile. Does the profile go if device is reloaded? Can user just accept once or is nagged each time they turn wifi on/off? Etc.

Basically, "if you see an issue, install a new CAT profile" is probably the best line now

alan To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users
-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uczelniane Centrum Informatyczne       Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika         Nicolaus Copernicus University,
pl. Rapackiego 1, Torun                pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750     fax: +48-56-622-1850       tel kom.: +48-693-032-576



Archive powered by MHonArc 2.6.19.

Top of Page