The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

On 24/02/2021 19:09, Daniele Albrizio wrote:

3908e5ae-c287-e46a-69cf-9e121d7c4376 AT units.it">

On 24/02/21 18:19, Tomasz Wolniewicz wrote:

....

9430b2a5-2e96-381c-3812-8d1268d201b1 AT umk.pl">

The modern Android devices now point to the geteduroam app rather then the legacy eduroamCAT

Are you sure? Did you already thoroughly test this app on different mobile devices?

We did indeed test geteduroam on a lot of devices; ranging from Android 8 to Android 11; Samsung (S7, S10, A's), Huawei, Xiaomi, Google (Pixel 5).

> 3908e5ae-c287-e46a-69cf-9e121d7c4376 AT units.it">We
>       thought geteduroam was in a pre-release state since we experienced
>       a weird interaction with other phone apps that lead to phonebook
>       icons overwriting.
>

What happens is that geteduroam registers itself in the OS as application to send attachments to, so you could for instance receive an eap-config profile via WhatsApp, besides a download in the browser (for instance from CAT), e-mail or from within geteduroam itself.

The developers chose a mime-type that has this as a side effect, because otherwise it wouldn't be possible to forward the profile from WhatsApp (maybe some others).

We decided we didn't think this was too important, and changed this behavior so it may not be possible to send something from WhatsApp, so future builds (for Android 11 and up) will see changed behavior. Those builds are still in the beta channel - because we have so few people and devices that thoroughly test Android 11 yet ;-) so we indeed try to be very careful with that.

And I honestly believe the current version in the App store works well! It lacks few features and improvements, among this one - but those are not bugs.

I hope this helps,

    Regards,
    Paul

3908e5ae-c287-e46a-69cf-9e121d7c4376 AT units.it">

9430b2a5-2e96-381c-3812-8d1268d201b1 AT umk.pl">Cheers

Tomasz Wolniewicz

W dniu 24.02.2021 o 16:56, Stefan Winter pisze:

0daf6f0c-8661-a2ba-8b66-965379f5362b AT restena.lu">

Hello!

It's been little while since our last update of eduroam CAT. A number of small bug fixes accumulated over time, and there are a few "mini" features that deserve cutting a release 2.0.4.

The notable features are:

• [FEATURE #1] The system now sends out notification/alert mails if a significantly security relevant parameter was changed. The mails go to the NRO admin. Significant changes are:
  - change of institution name
  - addition of a new root CA (with more prominent WARNING if the new CA has the same DN as an existing one)
  - addition of a new acceptable server name
• [FEATURE #2] support negotiation of TLS versions higher than 1.0 while still rejecting SSL2 and SSL3
• [FEATURE #3] realm reachability checks now produce a WARNING level message if the EAP server does not support TLS1.2 or higher
• [FEATURE #4] check whether SRV-discovered hostname and certificate hostname match

Also, we are happy to add a new translated language: welcome, Română (Romanian).

You can find the tarball on GitHub as usual ( https://github.com/GEANT/CAT/releases/download/v2.0.4/CAT-2.0.4.tar.bz2 ) but for most of you the most interesting question is probably when the new code will be deployed on https://cat.eduroam.org.

We have reserved a maintenance slot for that tomorrow, 1300 CET. The expected downtime is in the seconds range, so you would be particularly unlucky to notice at all.

As usual, if you notice new buggy behaviour of any sorts after the update, please let us know.

Greetings,

Stefan Winter

-- 
Tomasz Wolniewicz    
          twoln AT umk.pl        http://www.home.umk.pl/~twoln

Uniwersteckie Centrum Informatyczne   Information&Communication Technology Centre
Uniwersytet Mikolaja Kopernika        Nicolaus Copernicus University,
pl. Rapackiego 1, Torun               pl. Rapackiego 1, Torun, Poland
tel: +48-56-611-2750                  tel kom.: +48-693-032-576

-- 
-------------------------------------------
Daniele Albrizio
Università degli Studi di Trieste | University of Trieste
Ufficio Reti di Ateneo | University Networks Office
Via Alfonso Valerio 12 - 34127 Trieste (Italy)
daniele.albrizio AT units.it
Tel. | Ph. +39 040 558 3319