cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] Renewing FreeRADIUS server certs with the same key as prior cert

From: Florian Lengyel <Florian.Lengyel AT cuny.edu>
To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Cc: Jonathan Frost <Jonathan.Frost AT cuny.edu>, Anna Wong <Anna.Wong AT cuny.edu>, Mark Manis <Mark.Manis AT cuny.edu>, Arthur Ecock <Arty.Ecock AT cuny.edu>, Agustin Ferrer <Agustin.Ferrer AT cuny.edu>
Subject: [[cat-users]] Renewing FreeRADIUS server certs with the same key as prior cert
Date: Mon, 18 Sep 2023 18:00:44 +0000
Accept-language: en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=cuny.edu; dmarc=pass action=none header.from=cuny.edu; dkim=pass header.d=cuny.edu; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=oQvT4YFbh64vjz4CkODJ6Dk58WLwsKqj29q+njwSKR8=; b=jGdo/RC0R7+Tr5ymiZXMcHCYeGjbCuFw2Y1EX2eIrM+neojO6Zy90SLcDFU16OjrU3MtMEdHLQtprp9oO9I56ahiLieZPgLV36++0og01FhP5fkSfspIkuCYLs9nv3eTT0hXbQn+c4noFvOOoUBmlJVQwqXH+dMJTzYQgOzmGxBW9NJq9244mVNwgLO89LUSzXRXovvJ4Hq1Q1zLeOcGY7ki0P+yg1hWDMKd6KmwqIwn4mLPgdb3AOa9takj+D7cOEvawqxgTiTtmLhN8GY42NNuod1x3H5emhNiw1b3y1fFz399Goj5Qzr7ZnOSI7tVm1P0g6QY3CT8oGXg5CgqrQ==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=kC4uTkVHxudLXZOVM40qa62+pih4bOF7Js7COTZ6XCuMMekXE9uCOWu4+fTawnt8t1sxTBa6yPqEWx/wQO9q6nL4ciZ8f8PN6qVmFjq4VGh69QrOPOBSEpqFOAlsR9jt/8S7veLh2t+NCBjzJJAdsPlEfoAZ1r07chi1UCTk3pOGpnIb1B9D1greP9pj1g1F2FaHCDQTyJzPPbhJ7aAauHNA9u8hNy8jW3WnZpF9od/glQrHyorHUho+xQ47bbk8hPA0RpIoojmOhxn//QOUsU8q+aqCHmqd3GsgokHrlqJH2iIQPX0gW+NNg58RZFufpXrsKZmSACpwHqMncWNrbw==

Hi,

I am renewing the server certificate of my FreeRADIUS cluster for eduroam.

The server key is remaining the same.

Is it true that users typically should not need to reconfigure their devices?.

My understanding is that the existing settings should continue to work after

the server cert is renewed as the server key is the critical component for the client-trust relationship.

Florian

Florian Lengyel, PhD

Identity and Access Management

CUNY CIS 395 Hudson Street, New York, NY 10014

Voicemail: (646) 664-2370 Cell: (917) 621-7845

Email: florian.lengyel AT cuny.edu

[[cat-users]] Renewing FreeRADIUS server certs with the same key as prior cert, Florian Lengyel, 09/18/2023
- Re: [[cat-users]] Renewing FreeRADIUS server certs with the same key as prior cert, Martin Stanislav, 09/18/2023