The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[David Trill <David.Trill AT Marine.ie>]

HI Stefan,

Thank you for the reply. Our cert is self-signed by our own CA. Would this 
mean I cannot create installers? It's not a big deal if I can't, I can create 
the profile manually for our users. I've attached the cert for you.

Thanks and regards,
Dave



-----Original Message-----
From: Stefan Winter 
[mailto:stefan.winter AT restena.lu]
 
Sent: 19 May 2016 07:02
To: David Trill 
<David.Trill AT Marine.ie>;
 
'cat-users AT lists.geant.org'
 
<cat-users AT lists.geant.org>
Subject: Re: [[cat-users]] help with error

Hi David,

> I'm having some trouble with creating installers for my iDp. The 
> profile keeps saying I need to provide a CA certificate file for my 
> EAP type even though I have it added.  I would be greatful if you 
> could help out with any suggestions.

Your second screenshot has a glaring red field to it saying about the 
uploaded certificate: "This is a *SERVER* certificate".

We really do need the certificate of the issuing CA, not the server 
certificate.

If your cert is self-signed (i.e. it is the server cert and the trust root in 
one), then it may have been mis-classified - in which case I would appreciate 
a copy of the cert off-list so we can improve our detection (self-signed 
certs are a real pest!).

Greetings,

Stefan Winter

--
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la 
Recherche 2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's 
key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: eduroam.marine.ie.crt
Description: eduroam.marine.ie.crt