The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <stefan.winter AT restena.lu>]

Hello all,

we are happy to announce the release of CAT version 1.1.4.

This is almost exclusively a bugfix release; see the Changelog below. In
fact, for those of you using the eduroam production-level instance
https://cat.eduroam.org, it is almost a NOOP as we had backported many
of the things from Changelog as hotfixes immediately.

One significant feature addition is the new language Euskara (Basque
language).

The second significant change is related to credentials storing in
Windows installers:

* all EAP types: credentials are stored with a new utility
WLANSetEAPUserData donated by Simon Rozman (it is more universal than
the previous setEAPCred.exe in that it can also store client
certificates, not just PEAP passwords).

* EAP-TLS: previously, the installer always requested the user to point
the certificate (P12) file. Now it also extracts the fingerprint from
the personal certificate it is installing and then sets the TLS
credentials pointing to this particular certificate. Therefore even if
the user has more suitable certificates in the personal store, the
installed one will be used without the user having to select it in the
Windows prompt. If the IdP admin has set the EAP-specific option "Turn
on selection of EAP username" then the user will be additionally
prompted for this name and the name will be stored in the profile,
therefore Windows will not prompt for that at connect time.

We plan to install 1.1.4 to production in the week starting 03 March
2017.

You can find the source code on the GEANT SVN under
CAT/releases/CAT-1.1.4.tar.bz2. The file is also currently being
uploaded to the GEANT Downloads Portal to the usual place. This may take
a while.

FYI, the list of changes between 1.1.3 and 1.1.4 is below:

Changes in 1.1.4
================
- [BUGFIX #1]  set_lang had some security issues
- [BUGFIX #2]  the device name on the main button was not being
               translated
- [BUGFIX #3]  IdP listing was sending multiplied location info
- [BUGFIX #4]  typo regarding Google Analytics fixed (wrong domain name)
- [BUGFIX #5]  fixed problem with redirecting from index.php to
               basic.php not passing arguments correctly
- [BUGFIX #6]  fixed problem with IdP argument not overriding the
               country setting form geolocation
- [FEATURE #1] Windows credenial setting has been rebuilt for PEAP and
               TLS, now TLS can point exactly to the user certificate
               being installed.
- [FEATURE #2] GEANTLink binary updated to final release version
- [FEATURE #3] Euskara (Basque) language added

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0x8A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature