The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> I wanted to follow up and see if you had any advice on this?

Sorry, your mail was stuck in the mailing list moderation queue until
today (subscribing to the list prevents that).

> I thought I was doing this correctly. The RADIUS solution in use by
> Ponce is a Windows NPS server. I had the cert issued by a Windows ADCS
> server in their environment, pushed it to the RADIUS server, and then
> exported as PFX. Then I translated the PFX into PEM through OpenSSL and
> uploaded it the profile, where I then received the error above.
> 
> How do I do this correctly?

The discrepancy is actually rather clear:

* the web interface complains that you uploaded a /server/ certificate
* your mail subject is clear that you know a /CA/ certificate is expected
* CA != server certificate

If you were to upload the root CA certificate instead of the server
certificate, all would be fine.

Your description of what you did above indeed makes clear that you
exported the /server/ certificate and then converted and uploaded that
one. Just do the same for the CA instead, and you should get a working
installer.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature