The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Martin Stanislav <ms AT uakom.sk>]

Dear Neftalí,

May I suggest a service available via eduroam CAT that allows
logged-in org. administrators to test their RADIUS setup?
GÉANT wiki has information on how to use this test service [1].

Also, the test service is likely to draw your attention to the details
in EAP server certificate currently deployed on your RADIUS server
(CN: radius.imdea.org), e.g. missing Extension Basic Constraints
CA:FALSE, SubjectAltName doesn't match CN. You can find a lot more
details on what to consider wrt EAP server certificate on the GÉANT
wiki [2]. Certificate deployed on your RADIUS server has been issued
by a private CA and information gathered on this wiki page can
help you improve your current setup (or consider moving to a public CA).

Kind regards,
Martin

[1] 
https://wiki.geant.org/display/H2eduroam/A+guide+to+eduroam+CAT+for+IdP+administrators#AguidetoeduroamCATforIdPadministrators-VerifyingmyRADIUSsetup

[2] 
https://wiki.geant.org/display/H2eduroam/EAP+Server+Certificate+considerations

On Thu, Nov 30, 2023 at 10:23:02AM +0100, Neftalí González wrote:
> Hello 
> 
> I’m reporting this problem on behalf of
> <mailto:guillermo.suarez-tangil AT imdea.org> guillermo.suarez-tangil AT imdea.org
> 
> Eduroam has been working before for the user
> 
>  
> 
> *     Device: MacBook Pro
> *     Certs: Installed
> 
> 
> 
> 
> 
> *     Date of problem: 2023-11-29 at 15.20.57
> *     Error shown:
> 
> 
> 
>  
> 
> Best
> 
>  
> 
> Neftalí González
> 
> Systems Administrator
> 
> E-mail:  <mailto:neftali.gonzalez AT imdea.org> neftali.gonzalez AT imdea.org
> 
> Phone: +34 91 481 6947
> 
>  
> 
> 
> 
>  
> 
>  <https://twitter.com/IMDEA_Networks>
> <https://www.linkedin.com/company/imdea-networks/>
> <https://www.facebook.com/imdea.networks/>
> <https://www.instagram.com/imdea_networks/>
> <https://www.youtube.com/c/IMDEANetworksInstituteLeganes>  
> 
> This message may contain confidential or privileged information. If you have
> received it in error, please do not use it, notify the sender and delete it.
> See  <https://networks.imdea.org/legal-notice-email/> legal notice. 
> 
> Este mensaje puede contener información confidencial o privilegiada. Si le
> ha llegado por error, rogamos no haga uso del mismo, avise al remitente y
> bórrelo. Consulte
> <https://networks.imdea.org/es/aviso-legal-correo-electronico/> aviso legal.
> 
>  
> 
> To unsubscribe, send this message: 
> mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
> Or use the following link: 
> https://lists.geant.org/sympa/sigrequest/cat-users