The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hello,

> Hello Geant Team, All our users at ESRF that install the eduroamCAT
> application can not connect to the eduroam network. We are seeing the
> certification installed by the eduroamCAT App is not the right one.
> Attached it is the good certification: *ESRF_Ok_eduroamCert.pem* After
> we manually install the certification to the phone (see attached) is
> possible to connect to eduroam network. Could you please have a look?

Sure.

The CA data is curated by the organisation's eduroam administrators.

The data I found lists *two* CAs, one of which is the one you attached.

The other one is also a root CA, but it seems to be an old, discontinued
one. Subject: C = SE, O = AddTrust AB, OU = AddTrust External TTP
Network, CN = AddTrust External CA Root

On most Android versions, it is only possible to define *one* root CA as
trust anchor.

With the choice of two, apparently the wrong one is installed as a trust
anchor in this case.

If you are the admin and have access to the CAT administrator interface,
the trivial fix is to log into the admin interface and delete the old CA.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature