The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Tomasz Wolniewicz <twoln AT umk.pl>]

Hi,

 you have omitted the attachments.

Of course, I can confirm that the script does add this empty line after the

-----END CERTIFICATE-----
line, however no parser should care about what is outside the BEGIN/END lines.

I have just tried Ubuntu  23.10 with NetworkManager/wpa_supplicant and this works for me without any problems.

Could you let me know what suplicant tools are active on the machine that is causing problems.

Cheers

Tomasz

W dniu 9.02.2024 o 14:43, Carlos de Manuel Clemente (via cat-users Mailing List) pisze:

Hello

Certificate provided by linux script does not work

Organization: University of Castilla-La Mancha

Administrator: carlos.demanuel AT gmail.com

Affected profiles: all

Operating system: Linux

We have detected that computers with linux (specifically we have tested with Linux Mint and Ubuntu) do not connect correctly with eduroam after executing the configuration script downloaded from https://cat.eduroam.org.

We have noticed that the linux installer incorporates the ca.pem certificate that includes an empty line after the "End Certificate" line. Removing that empty line the equipment connects correctly.

I attach both files. CA.pem provided by the installer, and radius-eduroam2023.crt which is the one we provide for manual configuration and for the installer profile.

This line added at the end causes a connection failure on Ubuntu computers.  

Our RADIUS alert is: EAP-PEAP: fatal alert by client - internal_error

eap-tls: Error in establishing TLS session.

I am not aware of any other devices being affected. I also don't know since when this problem has been happening.

Can you make the script generate the ca.pem file without the last empty line?  Or tell me another solution if there is one.

Thank you.

Best regards

Carlos de Manuel Clemente
Técnico I - Analista de Sistemas y Redes
RECTORADO DE LA U.C.L.M. | Edificio CTIC C/ Altagracia, 50 | 13003 Ciudad Real
Tfno: 926 295 202  | Móvil: 680 222 092  |  Correo: Carlos.deManuel AT uclm.es
Mensaje Instantáneo  |   https://www.linkedin.com/in/carlosdemanuel/

 

Por favor, no imprima este documento si no es estrictamente necesario. Cuidar el medioambiente es responsabilidad de todos.
Este mensaje de correo electrónico puede contener información confidencial de la UCLM, siendo para uso exclusivo del destinatario.
Si usted lo ha recibido por error y no es el destinatario del mensaje, le rogamos que no difunda su contenido y lo comunique al remitente.

 

Please do not print this document unless absolutely necessary. Environmental protection is in our hands.
This e-mail may contain confidential information of the UCLM and is exclusively intended for the addressee.
If you have received it by mistake and are not the intended recipient, do not send the contents and please notify the sender.

 

      To
        unsubscribe, send this message:
        mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
        Or use the following link:
        https://lists.geant.org/sympa/sigrequest/cat-users
    
-- 
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME