The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hi,

> ummm..okay. so, this is documented...just need to give access to 
> cat.eduroam.org (A record, AAAA
> coming...) - but for Android you also need the google play store access - 
> which is a rather large
> and changing list.....  and *then* there are some other issues
> 
> 
> 1) some federations dont use car.eduroam.org - they use their own version 
> of CAT - so you will need
> to poke holes for those too (and I dont recally there being a directory of 
> those instances....)
> 
> 2) some sites dont allow their profiles to be downloaded from CAT - they 
> keep their own profiles
> locally (so that, for example, they are known/tested and any change to CAT 
> doesnt mean that their
> users are now all getting untested profiles with new features.....) so 
> those would also have to be allowed

not to forget 3)
CRL and OCSP hosts to validate the HTTPS certificate on cat.eduroam.org.

Stefan


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature