cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] help with: server certificate could not be verified to the root CA

From: Zenon Mousmoulas <zmousm AT noc.grnet.gr>
To: cat-users AT lists.geant.org
Cc: "Taxiarchis G. Tsaparas" <tgt AT unipi.gr>
Subject: [[cat-users]] help with: server certificate could not be verified to the root CA
Date: Fri, 17 Mar 2017 13:54:29 +0200
Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (1024-bit key) header.d=noc.grnet.gr

Hi,

we've noticed an issue in a realm reachability test, where cat.eduroam.org reports:

The server certificate could not be verified to the root CA you configured in your profile!

We can't reproduce it with openssl:

openssl verify -CAfile <root_ca_uploaded_to_CAT.pem> <server.pem>
server.pem: OK

This is the profile:

https://cat.eduroam.org/admin/action_realmcheck.php?inst_id=1958&profile_id=3356

Any ideas? Could this be related to the missing x509v3 SAN?

Thanks for any insight,
Z.

[[cat-users]] help with: server certificate could not be verified to the root CA, Zenon Mousmoulas, 03/17/2017
- Re: [[cat-users]] help with: server certificate could not be verified to the root CA, Stefan Winter, 03/17/2017