The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

> In the process of installing eduroam for access from my mobile (Samsung
> Note 4, Android 6.0) I reached the point to download the installer for
> my institution (CSIC, Spain). I tried the two options, downloading it
> with Firefox and with the android-cat app (previously installed).
> This first one download it. Then I tried to install it, which took me
> into a given installation page of the android-cat app. The second one
> directly did the same. In that page I am invited to enter user id and
> password, but there are some info and I observe two red crosses or
> warnings:
>   No CA certificate found
>   Server subject Match missing

That status page informs you of the /current/ configuration state on
your phone. It is not the reason why the installation would fail.

> No surprisingly the installation fails.
> Shall I install previously a CA certificate?
> Where and how? Sorry I am not/do not want to be an expert in Android.

The configruation file you downloaded contains all the details needed,
including the CA. The app tries to delete the old network configuration
and replaces it with the new, correct one.

Unfortunately, on Android 6 an app is only allowed to delete old
configuration if it created the config itself earlier.

Your old eduroam config was probably created by you "by hand" and the
app is not allowed to delete it. That's why the installation fails.

You first need to go to Settings -> Wi-Fi and delete the eduroam network
configuration. Then, go into the app again and install. It should now work.

Please note that we cannot do anything about this restriction. This is
an Android API issue.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature