The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi David,

> I’m having some trouble with creating installers for my iDp. The
> profile keeps saying I need to provide a CA certificate file for my
> EAP type even though I have it added.  I would be greatful if you
> could help out with any suggestions.

Your second screenshot has a glaring red field to it saying about the
uploaded certificate: "This is a *SERVER* certificate".

We really do need the certificate of the issuing CA, not the server
certificate.

If your cert is self-signed (i.e. it is the server cert and the trust
root in one), then it may have been mis-classified - in which case I
would appreciate a copy of the cert off-list so we can improve our
detection (self-signed certs are a real pest!).

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature