Skip to Content.

cat-users - [[cat-users]] CAT Tool - Certificate import issue

cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive


[[cat-users]] CAT Tool - Certificate import issue


Chronological Thread 
    < Chronological >      < Thread >
  • From: "Mundiya, Shafiq" <Shafiq.Mundiya AT city.ac.uk>
  • To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
  • Subject: [[cat-users]] CAT Tool - Certificate import issue
  • Date: Mon, 4 Jun 2018 10:08:45 +0000
  • Accept-language: en-GB, en-US
  • Authentication-results: prod-mail.geant.net (amavisd-new); dkim=pass (1024-bit key) header.d=cityuni.onmicrosoft.com
  • Authentication-results: spf=none (sender IP is ) smtp.mailfrom=Shafiq.Mundiya AT city.ac.uk;
  • Spamdiagnosticmetadata: NSPM
  • Spamdiagnosticoutput: 1:99

Enquiry: Hi,

 

RE: eduroam.city.ac.uk

 

We have installed our new certificate for eduroam this year and are facing an issue whereby the new certificate Root and Intermediate Certificates are not trusted by the eduroam CAT Tool, see output of the error we get when importing the certificate into the CAT Tool:

 

‘Client certificate: CA-N, non-accredited

(CA: DC=hr/DC=eduroam/DC=MaliPero PKI 1)

* correct certificate, expected result: FAIL

*

 

 

Server did not accept this client certificate: unknown authority or no certificate policy or another problem (elapsed time: 103 ms.)’

 

 

The above is the output we get when importing both the intermediate and root certificates or eduroam into the CAT tool.

 

We never had this issue last year, only thing that has changed is the root and intermediate certs now use the new G3 certificates provided by JANET, has anyone experienced this issue and know the fix?

 

 

Kind Regards,

 

Shaf

 

Shafiq Mundiya

Windows Service Engineer

Windows Team

Enterprise Technology Services

Room SG03

X0420

 


Archive powered by MHonArc 2.6.19.

Top of Page