The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

On 09/02/2024 14:43, Carlos de Manuel Clemente (via cat-users Mailing List) wrote:

PR3PR01MB6506D3CA0B2A12911FE297C0E44B2 AT PR3PR01MB6506.eurprd01.prod.exchangelabs.com">

Hello

Certificate provided by linux script does not work

Organization: University of Castilla-La Mancha

Administrator: carlos.demanuel AT gmail.com

Affected profiles: all

Operating system: Linux

We have detected that computers with linux (specifically we have tested with Linux Mint and Ubuntu) do not connect correctly with eduroam after executing the configuration script downloaded from https://cat.eduroam.org.

We have noticed that the linux installer incorporates the ca.pem certificate that includes an empty line after the "End Certificate" line. Removing that empty line the equipment connects correctly.

I attach both files. CA.pem provided by the installer, and radius-eduroam2023.crt which is the one we provide for manual configuration and for the installer profile.

This line added at the end causes a connection failure on Ubuntu computers.  

Our RADIUS alert is: EAP-PEAP: fatal alert by client - internal_error

eap-tls: Error in establishing TLS session.

I am not aware of any other devices being affected. I also don't know since when this problem has been happening.

Can you make the script generate the ca.pem file without the last empty line?  Or tell me another solution if there is one.

I was not inclined to answer and leave the answer to someone else, until you asked for "another solution if there is one" ;-)

You could also use/try the geteduroam client for Linux. We're very curious about feedback, the client is relatively new:

The CLI is available at:

https://github.com/geteduroam/linux-app/releases/tag/nightly

The GUI at:

https://github.com/geteduroam/linux-app/releases/tag/0.2

Despite that, I'm sure someone will look at your report, and it's great you found out in detail what is wrong with the installer for you.

Regards,
Paul

PR3PR01MB6506D3CA0B2A12911FE297C0E44B2 AT PR3PR01MB6506.eurprd01.prod.exchangelabs.com">

Thank you.

Best regards

	Carlos de Manuel Clemente Técnico I - Analista de Sistemas y Redes RECTORADO DE LA U.C.L.M. | Edificio CTIC C/ Altagracia, 50 | 13003 Ciudad Real Tfno: 926 295 202  | Móvil: 680 222 092  |  Correo: Carlos.deManuel AT uclm.es Mensaje Instantáneo  |   https://www.linkedin.com/in/carlosdemanuel/

 

Por favor, no imprima este documento si no es estrictamente necesario. Cuidar el medioambiente es responsabilidad de todos.
Este mensaje de correo electrónico puede contener información confidencial de la UCLM, siendo para uso exclusivo del destinatario.
Si usted lo ha recibido por error y no es el destinatario del mensaje, le rogamos que no difunda su contenido y lo comunique al remitente.

 

Please do not print this document unless absolutely necessary. Environmental protection is in our hands.
This e-mail may contain confidential information of the UCLM and is exclusively intended for the addressee.
If you have received it by mistake and are not the intended recipient, do not send the contents and please notify the sender.

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users