The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

the server and CA certificate that is used for realm renata.edu.co is
not acceptable to modern operating systems, Windows 7 included.

The server cert is signed with SHA-1.

The CA certificate does not mark the "basicConstraints:CA" extension as
critical.

The CRL distribution point points to a domain "example.com"

My guess is that the IdP admin created the CA/server certificate pair
with an old version of FreeRADIUS.

The CA and server certificate need to be replaced to be good enough for
modern operating systems, at least to fix the first two issues I noted.

The CA generation scripts that ship with FreeRADIUS 3.0.11 generate much
better certificates for example. You do not need to switch to FreeRADIUS
3 entirely; just using its certificate generation scripts is sufficient
to overcome this problem.

Greetings,

Stefan Winter

Am 14.07.2016 um 22:57 schrieb Luis Eduardo Barreto Santamaria:
> Dear  CAT eduram Support team
> 
> I am writing  with regard to setup installer " CAT EDUROAM" to windows 7
> , because in some situation we need to use the eduroam service on
> computer with this operative system , t he customer eduroam service is
> filing complaint because CAT eduroam instaler does not work
> 
> i send you attached file with the step by step when i try to use it Cat
> eduroam on Windows 7
> 
> Thank you for your help , i look forward to hearing from you
> Luis Eduardo
> 
> 
> 
> -- 
> 
> Gracias,
> 
> Cualquier duda o inquietud con gusto sera atendida.
> Att:
> 
>       
> Luis Eduardo Barreto* Santamaría*
> *Ingeniero desarrollo e infraestructura RENATA*       
> Carrera 18 N°79 - 47, Oficina 201
> Bogotá D.C., Colombia
> Teléfono:     [+57] 1 *530 2604* Ext. *1026*
> Móvil:        [+57] 321 236 37 27
> OV:   
> *http://vcespresso.renata.edu.co/luis.barreto AT renata.edu.co*
> skype:        eduardobarreto19
> 
> /*www.renata.edu.co <http://www.renata.edu.co/>*/     
> 
> Conozca nuestros Servicios de Tecnología Avanzada RENATA, STAR
> <http://www.youtube.com/watch?v=tJByVgSzfbE&list=UUyMGDIiYBpWfp-mIj1TIEjw&feature=sharecontrol>
> 
>       
> 
> Zona de los archivos adjuntos
> Vista previa del vídeo Servicios de Tecnología Avanzada RENATA, STAR de
> YouTube
> <http://www.youtube.com/watch?v=tJByVgSzfbE&authuser=0>
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature