cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] PEAP-MSCHAPv2 CA certificate file uploaded but not detected by CAT admin

From: ALBRIZIO DANIELE <address@concealed>
To: "address@concealed" <address@concealed>
Cc: "address@concealed" <address@concealed>
Subject: Re: [[cat-users]] PEAP-MSCHAPv2 CA certificate file uploaded but not detected by CAT admin
Date: Thu, 28 Nov 2024 15:36:51 +0000
Accept-language: it-IT, en-GB, en-US
Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=units.it; dmarc=pass action=none header.from=units.it; dkim=pass header.d=units.it; arc=none
Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector10001; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=4LZ5L60KJaESzBCFHkiPqedfd30KLresn2j1giZVAN8=; b=uwDxlj+l2VUm37p7StSSFxVBfJDMXSaDg8UD8/RNQyoooyQUpeZUiSQEnEFowqNOkJCoS4n/B0bAB3I5JyVFZT/ybFlrlP7MTj19MXKRjjrXYCtyqBSg9ZxV002OIiNlrV5Zdt+UbKhr8c47f+qZ/97m54euyZdJHZFJ66SdEqGdWfdrGegsvAq8cuXMPU0POuH+IbtpcBeJfdoaxYfTPUuM4SweqWNTRPWDP1x3vWDmJrTls1DJMqNQ/jWdTz+ysjcZS6TudPIdQ6lFdBf5r/9o3jBrU1TkjlIN9uuEA5Ijzk4XjrOr/kP81QM5JCyuSMMAP6xd4QkG3ScaaQi0Qw==
Arc-seal: i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; b=a05eaH2MjfOi+KAXmmMOvWmPKVPiDjPo8cbNDpfjkoQKLBEjerJ9uBYYXESJ6k8yD/qtHZ8Pa1zO7y3DhzFj6MomnsO4zK9YQzBzgVq0baNTmK4ERtwpCTq50u6rn/F7NC2HU+q2HIk4PP0rRLZoaXdrQpajPZzbxRNpAw8qUCBSD3iIPp5WopwA6/HIVzr0jWwZHdU1PzAz354+HmYQfpJDEFUslKE6nZzPoz6xS7hzFNWiEYbmi38IXKP/yRrcqsqEzCnyeFXvYvGs+qZAynCG8ci6XSh7KoJeO4Wo/Z5uHi8Hgy+1yqxuax5yefLxBuFGGNAxpAkgggH7tJ/G1A==
Authentication-results: mail.geant.org; dkim=pass (1024-bit key; unprotected) header.d=units.onmicrosoft.com address@concealed header.a=rsa-sha256 header.s=selector2-units-onmicrosoft-com header.b=v5NUlLZJ; dkim-atps=neutral
Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=units.it;

Uh! Thank you Martin for pointing this out and addressing me to the wonderful guide that is becoming more and more clear and complete.

On Thu, 2024-11-28 at 16:11 +0100, Martin Stanislav wrote:

Dear Daniele,

On Thu, Nov 28, 2024 at 02:24:16PM +0000, ALBRIZIO DANIELE wrote:

I was trying to remove some old ca certificates from a profile, but the
variation led to a "PEAP-MSCHAPv2 is missing required information CA
Certificate File !PEAP-MSCHAPv2 is missing required information CA
Certificate File !" error message.
I can't understand why this is happening since I have 2 valid
certificates in the profile.

You can find a screencast attached (if the mailing list permits 2.6 MB
post)

Only (optional) intermediate CA certificates are left in EAP details
settings of your configation profile. What's missing is a respective
root CA certificate. You'll find more details in eduroam CAT admin guide
on the GÉANT wiki [1].

Kind regards,
Martin

[1] A guide to eduroam CAT for IdP administrators, EAP Details
https://wiki.geant.org/display/H2eduroam/A+guide+to+eduroam+CAT+for+IdP+administrators#AguidetoeduroamCATforIdPadministrators-EAPDetails

--

Daniele Albrizio

Ufficio Reti e telefonia | ICT - Phone and Network Management
Università degli Studi di Trieste | University of Trieste
Via Alfonso Valerio 12 - 34127 Trieste (Italy)
address@concealed
Tel. | Ph. +39 040 558 3319

Ufficio Reti e telefonia | ICT - Phone and Network Management
Tel. | Ph. +39 040 558 3331

Attachment: smime.p7s
Description: S/MIME cryptographic signature

[[cat-users]] PEAP-MSCHAPv2 CA certificate file uploaded but not detected by CAT admin, ALBRIZIO DANIELE, 11/28/2024
- Re: [[cat-users]] PEAP-MSCHAPv2 CA certificate file uploaded but not detected by CAT admin, Martin Stanislav, 11/28/2024
  - Re: [[cat-users]] PEAP-MSCHAPv2 CA certificate file uploaded but not detected by CAT admin, ALBRIZIO DANIELE, 11/28/2024