cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] new signing certificates, expiring signatures on previously downloaded profiles

From: Paul Dekkers <paul.dekkers AT surf.nl>
To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: [[cat-users]] new signing certificates, expiring signatures on previously downloaded profiles
Date: Wed, 30 Mar 2022 10:46:19 +0200
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=surf.nl; dmarc=pass action=none header.from=surf.nl; dkim=pass header.d=surf.nl; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=WyzNzjpCvEkKSFrgcxM+nLBLx4hh3c6DrDES8DxVA98=; b=NnTOHLapH3ns8580BwtwnO3vYFgggIS94Vw91YObUAZc1V+hGDPnRmE6E7k+ezIsEM9ZGmdZik4Vu207p+pxkMp1Qxp00kzcBlMEHxykZ7TfQ0aM/CkixQ+UUklauImvAV2vitUdsXIY1pbclJ21/q+viLnnB7TWmI48xO6pemPmvl/BeT5bjo8ScU0LW0pTFZJDAwlAzazt4wYx/c4ZsfUqTS4p/DOOoF5/Ol/ARvdhVTRVQfq1lqDWF1psQoLLfGXrZTVgx4LjlSG5xMZZ2MhVaIAE9wzhpILAc/oaF4N1/2DnwuO2ImNgXFYpoODr+7DvOi2u1bM60nnAdHf2lQ==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=JcwJ7M06txYFrw6JE0ogGeBZlcAfrAvuIamJeXasy9pJNpoPAy1t3Wnyhg2RQ1JIjaPTEEg1oSR5tHEeoFLj5Av/GvtmMq0AnkaVmtji8FvLqD/xiocpUciZ4EDtbquon8YnnW5+7T+j86K676y7tOhopos4wQMSwBaatQQdjM48UbhMTYG1B2FbskCNRyxPL/KICPs0yQiBaC9McDSAaRGtglSppT79nobkID2qzj7L4HE69YmDGGEewMBRpTrMFphXFSqOfQClO+K8BZCiiEyQzKgoRuZcOUt0Nhk4exj3JRfCGVtzYlAUA+HU6F5I2Yj8lnKeistnaBERDLUS5g==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=surf.nl;

Hi cat-users,

As you may know, we cryptographically sign the .mobileconfig profiles for Apple platforms and the .exe installers for Windows from eduroam CAT. *)

We replaced the signing certificates due to it's nearing expiration, and it's important to know that the signatures on previously downloaded .mobileconfig files will expire.

If you have or serve a local copy of the Apple installers for your
users: please replace these files with freshly downloaded ones
from CAT.

The Windows installer signatures have and support timestamps (at time of creation), and will not need to be replaced.

Regards,
Paul
eduroam service owner

*) This gives Apple devices the "Verified" label on installation

P.S. Thanks to Tomasz for his work on the CAT and hosted IdP side to replace some signing code and expired installers!

[[cat-users]] new signing certificates, expiring signatures on previously downloaded profiles, Paul Dekkers, 03/30/2022