cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

[[cat-users]] Certificate provided by linux script does not work

From: Carlos de Manuel Clemente <Carlos.deManuel AT uclm.es>
To: "cat-users AT lists.geant.org" <cat-users AT lists.geant.org>
Cc: Julián de la Morena Borja <Julian.delaMorena AT uclm.es>
Subject: [[cat-users]] Certificate provided by linux script does not work
Date: Fri, 9 Feb 2024 13:43:37 +0000
Accept-language: es-ES, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=uclm.es; dmarc=pass action=none header.from=uclm.es; dkim=pass header.d=uclm.es; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=oXL/HFOJDGfcH6r0mLLR8IwydqQ9NNGJTJPNz7mb2e8=; b=TtXRpo55QurZcJKQ7W0FcBLAN7Y0fCzJZuuPJx2rWL0QexncnJVoXQQFkWoYDgPY4jOgTJQD/ruaDcsBfTUPnZmecj1f3Y28Ja9lUaCa/MyEYQmG5D0t04aYlibLqXEKG6Ph0N+LUbTB+vNMAP0DWkJiRbQEYRMu9sQg/c2CtNHLhwRqzVZRQSFWcJ4glDS17QB9h7VW1Mg5qJRWF4j5KVpFfijFlih9+qBomMmSlcwIe9c8uYIk6V/URrVLst3IkimC0LgsO8Tn9Gd7cU1vv621g4+CKx64pGHEemkge3V+rAXop+esRmvzqMygiTz2VlK9h/HyyvKmnhy1P1wD0w==
Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ChHJjT6CKOuSnD09sjs24tG/pMYunljuHBtjpCbZilYs2DfbKlB1+9eWzhPMkuq0QHBcjqDvudZaU4lGiORHNN509Jx5XFTpdNKNV8SIs04/rZ7FaExsxKT2foxoTNXxjNTvbjreNWyAlnJFO8x3eA38xwLFUthQRj1kevQL3L3FJt3QWNE1FF4UF39Mbz4vwZgMteUwHUTi+GwWL6Cwz9N9rCOscsOJRZ7cSn9wxssgd9CYsVxzcl6akgYL3Kpd2FzYPJqieGJTAupBRBtNcZtkI4SBFTqashpaDs7qRf61/S0AuCs66AHLy7QbOoqovFhRzUdtC4KTgHv41AHp8Q==
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=uclm.es;
Msip_labels:

Hello

Certificate provided by linux script does not work

Organization: University of Castilla-La Mancha

Administrator: carlos.demanuel AT gmail.com

Affected profiles: all

Operating system: Linux

We have detected that computers with linux (specifically we have tested with Linux Mint and Ubuntu) do not connect correctly with eduroam after executing the configuration script downloaded from https://cat.eduroam.org.

We have noticed that the linux installer incorporates the ca.pem certificate that includes an empty line after the "End Certificate" line. Removing that empty line the equipment connects correctly.

I attach both files. CA.pem provided by the installer, and radius-eduroam2023.crt which is the one we provide for manual configuration and for the installer profile.

This line added at the end causes a connection failure on Ubuntu computers.

Our RADIUS alert is: EAP-PEAP: fatal alert by client - internal_error

eap-tls: Error in establishing TLS session.

I am not aware of any other devices being affected. I also don't know since when this problem has been happening.

Can you make the script generate the ca.pem file without the last empty line? Or tell me another solution if there is one.

Thank you.

Best regards


	Carlos de Manuel Clemente Técnico I - Analista de Sistemas y Redes RECTORADO DE LA U.C.L.M. \| Edificio CTIC C/ Altagracia, 50 \| 13003 Ciudad Real Tfno: 926 295 202 \| Móvil: 680 222 092 \| Correo: Carlos.deManuel AT uclm.es Mensaje Instantáneo \| https://www.linkedin.com/in/carlosdemanuel/

Por favor, no imprima este documento si no es estrictamente necesario. Cuidar el medioambiente es responsabilidad de todos.
Este mensaje de correo electrónico puede contener información confidencial de la UCLM, siendo para uso exclusivo del destinatario.
Si usted lo ha recibido por error y no es el destinatario del mensaje, le rogamos que no difunda su contenido y lo comunique al remitente.

Please do not print this document unless absolutely necessary. Environmental protection is in our hands.
This e-mail may contain confidential information of the UCLM and is exclusively intended for the addressee.
If you have received it by mistake and are not the intended recipient, do not send the contents and please notify the sender.

[[cat-users]] Certificate provided by linux script does not work, Carlos de Manuel Clemente, 02/09/2024
- Re: [[cat-users]] Certificate provided by linux script does not work, Paul Dekkers, 02/09/2024
- Re: [[cat-users]] Certificate provided by linux script does not work, Tomasz Wolniewicz, 02/09/2024
- Re: [[cat-users]] Certificate provided by linux script does not work, Tomasz Wolniewicz, 02/09/2024
  - RE: [[cat-users]] Certificate provided by linux script does not work, Carlos de Manuel Clemente, 02/12/2024
    - Re: [[cat-users]] Certificate provided by linux script does not work, Tomasz Wolniewicz, 02/12/2024
      - RE: [[cat-users]] Certificate provided by linux script does not work, Carlos de Manuel Clemente, 02/12/2024