The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Joel Garcia <joel.garcia AT devoteam.com>]

Hi Tomasz,

We have just enabled the anonymous identity in CAT administration, this is why the new script contains the config. I'm looking at the certificate extensions, but as you have said, tests are being rejected, so there may be some problems with the server.

Regards

On Thu, 28 Nov 2024 at 15:55, Tomasz Wolniewicz <twoln AT umk.pl> wrote:

I just checked that the enclosed script does not indeed set the outer identity, so the current CAT config must be different.

Tomasz

W dniu 28.11.2024 o 15:53, Tomasz Wolniewicz (via cat-users Mailing List) pisze:

This is really strange, I never saw it, it was never reported. I have tested an Ubuntu 20.04 VM with all updates and it went fine.

However I have observed something else. Your attached screen does not have any Anonymous identity set. On the other hand the profile of this institution defines a special outer identity and I just tested their installer and indeed it does set this anonymous identity. So something differs here.

Also CAT tests are being rejected at once so I am not sure that eduroam server actually works properly.

Yours

Tomasz

W dniu 27.11.2024 o 16:37, Joel Garcia (via cat-users Mailing List) pisze:

Hello,

I am Joel Garcia from Devoteam, I provide IT support to Basque Center for Applied Mathematics, in Spain. I have CCed their IT team in this email (it AT bcamath.org)

I have been in contact with RedIRIS support, and while we resolved several issues, there is one they could not assist with, so they redirected me to you.

The problem is with the Eduroam script for Linux, more specifically, with Ubuntu 20.04 . After installing eduroam with the python script (attached to this email) it gives an error when trying to connect to Eduroam.

In our Freeradius is a TLS generic fatal error.

The weird part is that if I go into the Wifi settings -> Security -> Ca certificate, click it and then confirm without selecting any other certificate, it suddenly works!!

I have updated everything in that Ubuntu, deleted and reinstalled Eduroam, rebooted... and the script still only works correctly after manually selecting the same certificate that the script installs.

Eduroam works in other devices, and the script only uses the self signed CA that signed the certificate of our Freeradius

Could you help me with this? Have you encountered this before?

Regards

--

Joel García Escribano
Cybersecurity Consultant
Cybertrust Devoteam
joel.garcia AT devoteam.com

To unsubscribe, send this message: mailto:sympa AT lists.geant.org?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users

-- 
Tomasz Wolniewicz

-- 
Tomasz Wolniewicz

--

Joel García Escribano
Cybersecurity Consultant
Cybertrust Devoteam
joel.garcia AT devoteam.com