The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> I am certain that we have all the authentication parameters correct, and
> the correct CA cert, but when configuring the device using the tool, all
> authentications fail with an error on the RADIUS server: “EAP-PEAP:
> fatal alert by client - internal_error”.
> 
> iPhone and Windows profiles seem to work as designed.
> 
> Is this something any one has had issues with?

I haven't come across this exact error message yet. What I can say is
that it is unusual - a "simple" cert rejection would be logged on the
RADIUS side with a clear error message indicating that the client does
not like the server cert, not an "internal error".

A shot into the blue: is your server using (only) newest TLS versions?
And is the client Android maybe a rather old version? Sometimes TLS
versions from the future confuse clients from the past. :-)

In any case, from the looks of it this seems to be an interop issue CAT
can not do much about. Can you detail which device or Android version
this is?

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature