The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Martin Pauly <pauly AT hrz.uni-marburg.de>]

Am 01.07.19 um 13:51 schrieb Johannes Schobel:
> today, eduroam stopped working here at Ulm University, Germany. This is,
> because our organization (Ulm University) forces us to install your "eduroam
> CAT" application from google play store
Technically, this is nonsense, the app just makes settings that can well be 
done manually on modern Android.
But it looks like the manual way is not documented. The colleagues at Uni Ulm 
seem to follow almost the same
path as most German Universities now (forced by expiration of old root cert 
on July 10).

A manual config would _presumably_ involve:
1. Install new root cert manually like described here (you can use it, it's 
the same root cert):
https://www.uni-marburg.de/hrz/internet/wlan/anleitungen/android-manuell/zertifikat/
2. Setting the Outer ID to:
anonymous.PKIv2 AT uni-ulm.de

_Presumably_ this special value of the outer ID triggers a certificate fork 
in the radius server
(name/domain: radius.uni-ulm.de), and the server delivers its a cert from the 
new PKI.
I just guessed these data from the .eapconfig XML profile they deliver on 
cat.eduroam.org
From their XML:

          <ServerID>radius.uni-ulm.de</ServerID>
        </ServerSideCredential>
        <ClientSideCredential>
          <OuterIdentity>anonymous.PKIv2 AT uni-ulm.de</OuterIdentity>
        </ClientSideCredential>

Please ask them for further support.

Cheers, Martin

--
  Dr. Martin Pauly     Phone:  +49-6421-28-23527
  HRZ Univ. Marburg    Fax:    +49-6421-28-26994
  Hans-Meerwein-Str.   E-Mail: pauly AT HRZ.Uni-Marburg.DE
  D-35032 Marburg

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature