The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

[Stefan Paetow <address@concealed>]

All,

 

This’ll be handled off-list.

 

Kind regards

 

Stefan Paetow

Federated Roaming Technical Specialist

eduroam(UK), Jisc

 

email/teams: address@concealed

gpg: 0x3FCE5142

 

For eduroam support, please contact the eduroam team via address@concealed and mark it for eduroam’s attention.

I am not available on Mondays and Fridays between 12:00 and 15:00 London time (UTC in winter, UTC+0100 in summer).

 

Note: I don’t expect a reply outside of your working hours, since I work internationally with colleagues in different nationalities with different religions, customs, and holidays. Reply when it is convenient for you.

 

Jisc is a registered charity (in England and Wales under charity number 1149740; in Scotland under charity number SC053607) and a company limited by guarantee registered in England under company number 05747339, VAT number GB 197 0632 86. Jisc's registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

Jisc Services Limited is a wholly owned Jisc subsidiary and a company limited by guarantee which is registered in England under company number 02881024, VAT number GB 197 0632 86. The registered office is: 4 Portwall Lane, Bristol, BS1 6NB. T 0203 697 5800.

 

For more details on how Jisc handles your data see our privacy notice here: https://www.jisc.ac.uk/website/privacy-notice

 

 

From: <address@concealed> on behalf of Paul Wadsworth <address@concealed>
Reply to: Paul Wadsworth <address@concealed>
Date: Thursday, 4 December 2025 at 07:41
To: "address@concealed" <address@concealed>
Cc: "address@concealed" <address@concealed>, Richard Friday <address@concealed>, James Talbot <address@concealed>
Subject: [[cat-users]] CAT Certificate issue

 

Hi 

 

Having updated our server certificate and renewed it via the https://store.sectigo.com/ portal and not the original https://cert-manager.com/ certificate providing portal, we now have 2 errors when uploading the new intermediate certificates to the CAT Portal. 

 

Testing from: eduroamTL dk

	Connected to eduroam.gateway.ac.uk. elapsed time: 660 ms. Test partially successful: a bidirectional RADIUS conversation with multiple round-trips was carried out, and ended in an Access-Reject as planned. Some properties of the connection attempt were sub-optimal; the list is below.
		The server certificate did not include a CRL Distribution Point, creating compatibility problems with Windows Phone 8.
		The certificate chain as received in EAP was not sufficient to verify the certificate to the root CA in your profile. It was verified using the intermediate CAs in your profile though. You should consider sending the required intermediate CAs inside the EAP conversation.

 

The new certificate does not contain CRL Distribution Point information and also the CAT Portal is not recognising the certificate below as a Root Certificate (see below).  

 

C=GB
O=Sectigo Limited
CN=Sectigo Public Server Authentication Root R46
Valid until 2038-01-18 23:59:59 UTC

 

So we get the above error and laptops downloading the CAT profile cannot connect to Eduroam.

 

Would you be able to assist with this?

 

Many thanks

 

Paul Wadsworth

Server & Systems Engineer

0116 274 4535 (Direct)

0116 274 4500 (Switchboard)

address@concealed

IT Support address@concealed

 

 

To unsubscribe, send this message: mailto:address@concealed?subject=unsubscribe%20cat-users
Or use the following link: https://lists.geant.org/sympa/sigrequest/cat-users