The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello,

the CA cert is not wrong; it's just old and has been superseded by an
intermediate CA version of itself.

Another person on the list had the exact problem.

Either delete the old CA from clients, *or* install the old version as
an additional trusted root in CAT. Installers which have this
alternative version marked as trusted will pass Windows cert chain building.

And, complain to the CA telling them that re-signing a root certificate
as an intermediate is a really really bad idea.

Stefan

Am 14.02.2017 um 13:05 schrieb Albert Pintu Pla:
> Hello,
> 
> We've a problem with some Windows 7 clients and Geant client. These
> Windows workstations have a preexistent Comodo certificate:
> 
> Imatge inserida 1
> 
> And we must unistall it from windows certificate database before we
> install the Geant client configured with this certificate:
> 
> Imatge inserida 2
> 
> Do you know if it's possible to ignore the wrong Comodo certificate when
> we install Geant client?
> 
> 
> 
> Thanks!
> 
> *Albert Pintu*
> Unitat d'Infraestructures
> Servei d'Informàtica
> 
> Pl. de la Mercè, 10-12 | 08002 Barcelona
> [Tel.] +34 93 542 11 00 <tel:%2B34%2093%20542%2011%2002> 
> http://www.upf.edu <http://www.upf.edu/>
> Universitat Pompeu Fabra, Barcelona
> To unsubscribe, send this message:
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link:
> https://lists.geant.org/sympa/sigrequest/cat-users


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature