The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi,

I'll ask the developers to investigate the workflow for private CAs, this maybe a side-affect of the removal of the certificates that were installed from a previous profile maybe.

Paul

On 18/06/2024 10:01, Carlos Maqueda Aroca wrote:

DU0PR02MB92943F3EE09F020AD303BC08ACCE2 AT DU0PR02MB9294.eurprd02.prod.outlook.com">

Hi Paul, thanks for your reply.

 

About the private CA, we agree that the user must be informed before installation in the initial step, once the institution and the profile to be installed have been selected, the message appears informing that the defined certificate is going to be installed.

 

But the problem we are reporting is that in the step where you enter the credentials, when you click on next, the message of the screenshot I attached appears, is that the application itself informs if you want to uninstall the certificate that in the previous step had been authorised to install, this is the reason we are reporting.

 

If you click on No, the process continues, if you click on Yes, the message from the initial step appears again informing you that the certificate is going to be installed.

 

This can be confusing for the end user.

 

Regards.

 

Carlos Maqueda Aroca
Unidad Técnica de Comunicaciones

Tecnologías de la Información
Universidad Autónoma de Madrid • Campus de Cantoblanco
c/ Fco Tomás y Valiente nº 11. Edificio B EPS, despacho TI-204 - 28049, Madrid
Tel.: 91 497 50 42 – carlos.maqueda AT externo.uam.es - www.uam.es

LinkedIn | Twitter | Facebook | Youtube
¿Eres de la Autónoma? Hazte AlumniUAM

Antes de imprimir este correo piense si es necesario. Cuidemos el medioambiente

 

 

De: Paul Dekkers <paul.dekkers AT surf.nl>
Enviado el: lunes, 17 de junio de 2024 14:44
Para: Carlos Maqueda Aroca <carlos.maqueda AT externo.uam.es>
CC: cat-users AT lists.geant.org
Asunto: Re: [[cat-users]] Strange behaviour in geteduroam (Windows version)

 

Hi,

There are no new steps on installation of a server/CA certificate, in fact, we removed this prompt if the CA was already installed/known on the system. It looks like you're using a private CA for your RADIUS server, in which case it will indeed prompt you to install it. The older version also did that (though I'm not sure what previous version you documented). This is a warning that Windows provides (and rightfully so, the private CA can be abused for other purposes, which is why I myself like to go with a public CA for the RADIUS server - but that's a personal preference and the considerations, pros and cons to both can be found online).

There are a lot of fixes in the new version, but for users with non-psuedo accounts (so account that are not using EAP-TLS) there is one bug in that we don't store the ID properly of the IdP from the discovery. This is a known bug, and caused the repair/reauthenticate buttons to fail. Considering most of the users of the geteduroam Apps are on pseudo-accounts (they have no other option), we still felt it was worth a release, and we'd fix this on the next development cycle. This is later this month, so I expect this as a minor improvement soon.

Paul

 

On 17/06/2024 13:56, Carlos Maqueda Aroca wrote:

Hello,

 

We have not received any information to our inquiry.

 

Regards.

 

Carlos Maqueda Aroca
Unidad Técnica de Comunicaciones

Tecnologías de la Información
Universidad Autónoma de Madrid • Campus de Cantoblanco
c/ Fco Tomás y Valiente nº 11. Edificio B EPS, despacho TI-204 - 28049, Madrid
Tel.: 91 497 50 42 – carlos.maqueda AT externo.uam.es - www.uam.es

LinkedIn | Twitter | Facebook | Youtube
¿Eres de la Autónoma? Hazte AlumniUAM

Antes de imprimir este correo piense si es necesario. Cuidemos el medioambiente

 

 

De: cat-users-request AT lists.geant.org <cat-users-request AT lists.geant.org> En nombre de Carlos Maqueda Aroca
Enviado el: jueves, 30 de mayo de 2024 13:46
Para: cat-users AT lists.geant.org
Asunto: [[cat-users]] Strange behaviour in geteduroam (Windows version)

 

Hello to all.

 

After the update of the geteduroam application (Windows version) we have decided to update the user manuals to bring the screenshots in line with the new design of the application.

 

For this we have used a computer with the factory operating system and we have started the installation and configuration process to indicate the steps to follow in the manual.

 

Our surprise has been to see that there is a step that was not there before, forcing the user to click on install the certificate, but the problem has been when in the step of entering the credentials when clicking on connect, a message has appeared informing if you want to uninstall the certificate that had previously been installed.

 

 

 

Is this behaviour in this step of the installation correct or is it a bug?

 

We have also checked that new functionalities have been added, some of them work and some of them do not:

 

- Delete certificate and delete profile: they work.

- Update credentials: does nothing.

- Reauthenticate: unknown profile error appears.

- Repair your account: unknown profile error appears.

 

It is appreciated that the application is being developed and new functionalities are being added, but we consider that if they are in the testing phase and do not work correctly, these functionalities should not appear in the application to avoid incidents with users.

 

Regards.

 

Carlos Maqueda Aroca
Unidad Técnica de Comunicaciones

Tecnologías de la Información
Universidad Autónoma de Madrid • Campus de Cantoblanco
c/ Fco Tomás y Valiente nº 11. Edificio B EPS, despacho TI-204 - 28049, Madrid
Tel.: 91 497 50 42 – carlos.maqueda AT externo.uam.es - www.uam.es

LinkedIn | Twitter | Facebook | Youtube
¿Eres de la Autónoma? Hazte AlumniUAM

Antes de imprimir este correo piense si es necesario. Cuidemos el medioambiente

 

 

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users