The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> The problem occurs when the user tries to authenticate on an apple device.
> For some reason, the user is presented with a different certificate (not
> the one in the profile) for the authentication server.
> Thereby the identity of the authentication server can't be verified.

If your devices get to see a bogus certificate then that's really not
CAT's fault. In fact, the main purpose of the CAT profiles is to ensure
that the device *won't* connect in presence of such a bogus cert. An
alert message is absolutely intentional then.

You should investigate where this incorrect certificate comes from.
Maybe someone is setting up a rogue access point - and then you should
be happy that proper CAT profiles prevented this from working for the
attacker.

> Have you guys updated CAT recently?, ´cause it seems that the latest CAT
> is incompatible with OSX and iOS.

There were no changes in the last few months.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature