The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

["[MK] Mikael Klintorp" <mk AT eg-gym.dk>]

Hi,

My users are no longer able to log on to foreign eduroam networks. When I 
test user logon from the Realm Check option on the CAT administration site an 
error concerning certificate revocation comes op:

The extension 'CRL Distribution Point' in the server certificate points to a 
location where no DER-encoded CRL can be found. Some Operating Systems check 
certificate validity by consulting the CRL and will fail to validate the 
certificate. Checking server certificate validity against a CRL will not be 
possible.

Strange, because the URL in the CRL Distribution Point section 
(http://www.eg-gym.dk/cert/EspergaerdeGymnasiumAndHF-CA.crl) is up-to-date 
and functional as far as I can test.

The Realm Check itself has always failed for our domain, but we have been 
able to logon to other eduroam WiFi's nevertheless. I have no idea when it 
stopped working (my users are not very communicative). At home everything 
works fine for both guests and local users.

Any ideas?

Best Regards

Mikael Klintorp
Espergærde Gymnasium og HF

Attachment: CrlError.jpg
Description: CrlError.jpg

Attachment: RealmCheckError.jpg
Description: RealmCheckError.jpg

Attachment: eduroamCertificate.zip
Description: eduroamCertificate.zip