cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] Multiple ca certs in catprofile ok?

From: "Stevens, Andy" <andy.stevens AT wur.nl>
To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Subject: [[cat-users]] Multiple ca certs in catprofile ok?
Date: Tue, 10 May 2022 06:03:57 +0000
Accept-language: en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=wur.nl; dmarc=pass action=none header.from=wur.nl; dkim=pass header.d=wur.nl; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=Jf2Jik4UykjDkQqRpKs+QnRnVYm+njiK22Xay+MAucg=; b=lpfprBVUbNgOvW1pxah9xWTMHNgXnr0gNjUkbi5f/SsT6IzP1dR4AHLQmNgFAb3nLdi3R3bGuNTccTo+h67wbB2W/9jzxknQPxPZhuV8iqoxyy5wSfexk5FEz9+/33ncP8JvhL9CwikejrBXrvVyIfuBENu0+Tbao3m06ElEF+7LuhbRdkgIdczGZl0IQSmqrpRZCNolOdqgQoHihfLJrNbPCVHqBVEw+Uxc8JK01m7Qs7FixuhWXcpRZoFaMY0W2PBrYbVY9L/xnwVLwzqPNUqJJGoQZqHhFQ08sc3kJJpfnXbao+0Swc1kk0GvckMfMwgG1xIC7o1EH6bglbLZ2w==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=CHMDzcQklKJGWAEbdBfsrZjib1RvFiLpPAlNKDVPzUFAADKj8AcDSPPIbUurcIjj2vs5BKOykGLPU/GhfZLdyAmKqnEMECSatk6C17seo9ItdMKbEz7HITF5gsJhR4VONTKS0jOuMjU8EbPGOKyGer6C1vovujcG+sy7qdXLsndBo0zAZ5xWjsXIvT/xJRMri+KlDGlSSlAFR0neHe2HJIfbhozx7IQCROzia/sxK924yOf0NXz1AIJORfN5cNiwB2tvcvxpBPq0P1wc5+EOzBZCCv+3oPHGJuIrxo/rK9xh7tqXYQOssgpT9f768vbOmCfzPBiN4xnYXMrwVGzHZw==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=wur.nl;

Hi all,

Are there any known limitation (for example android phones) that devices cannot handle a root cert + 1 or 2 intermidiate certs?

When i read this:

Create a new “permanent” eduroam profile in eduroam CAT, containing only the new root CA certificate. Delete the “migration” eduroam profile.

On:

https://wiki.geant.org/display/H2eduroam/A+guide+to+eduroam+CAT+for+IdP+administrators

It confuse me, why “only the root cert”. I want to put the full chain of CA, without the device cert that come from the radius server anyway.

Met vriendelijke groet / with kind regards,

Andy Stevens

Network / WiFi Infrastructure Engineer
CWNP 160383 | ECSE

MDT - Network Services

[[cat-users]] Multiple ca certs in catprofile ok?, Stevens, Andy, 05/10/2022
- Re: [[cat-users]] Multiple ca certs in catprofile ok?, Jørn Åne de Jong, 05/10/2022