The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Winter <address@concealed>]

Hi again,

> I found out about this only by a SSL cert observatory. It lists your
> intermediate as an intermediate just fine:
> 
> https://www.tbs-certificates.co.uk/FAQ/en/USER-Trust-RSA-Certification-Authority.html
> 
> but with the comment: "If you are looking for the root version of this
> certificate, you can find it here.":
> 
> https://www.tbs-certificates.co.uk/FAQ/en/racine-USERTrustRSACertificationAuthority.html
> 
> So, you should probably upload that latter root version of "USERTrust
> RSA Certification Authority" instead of the intermediate variant.
> 
> That should work much better.
> 
> But note that this is not really a CAT problem, and InCommon cert
> service support would be able to advise you on the correct use of
> InCommon cert chains much better than I can. I'm surprised that the info
> about this alternative root is not on that same wiki page.

Looking at the Wiki page again, I believe this is down to a simple
mistake: that [DER] link you followed points to the intermediate variant
of the CA, while it should point to the root variant of it instead
(which then also matches the text on the page, which talks about this CA
as if it is the root); if that had been the case, your download would
have been the correct one.

Stefan


-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66

Attachment: 0xC0DE6A358A39DC66.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature