cat-users AT lists.geant.org

Subject: The mailing list for users of the eduroam Configuration Assistant Tool (CAT)

List archive

Re: [[cat-users]] CRL Warning

From: Tomasz Wolniewicz <address@concealed>
To: Mats Luspa <address@concealed>, address@concealed
Subject: Re: [[cat-users]] CRL Warning
Date: Thu, 4 Dec 2025 10:13:29 +0100
Authentication-results: mail.geant.org; dkim=pass (2048-bit key; unprotected) header.d=umk.pl address@concealed header.a=rsa-sha256 header.s=default header.b=eIt5+WwA; dkim-atps=neutral
Dkim-filter: OpenDKIM Filter v2.11.0 smtp.umk.pl 635F3202A2

Hi,

I have run some tests. It turns out that eduroam.irf.se resolves to both IPv6 and IPv4 but the IPv6 endpoint is blocking. CAT probably tries that and fails.

Yours

Tomasz

W dniu 4.12.2025 o 08:01, Mats Luspa (via cat-users Mailing List) pisze:

Hello!

Our eduroam works but we get this CRL-warning that the crl url can't be found (crlDistributionPoints). However we have placed it https://eduroam.irf.se/ca.crl (or http://eduroam.irf.se/ca.crl) and that info is in the server certificate as you can see in the attachments.
I have tested crlDistributionPoints with both http://eduroam.irf.se/ca.crl and https://eduroam.irf.se/ca.crl with same result as you can see in the attachments.
So I wonder what I have done wrong.

/Regards Mats

--
Tomasz Wolniewicz

Attachment: smime.p7s
Description: Kryptograficzna sygnatura S/MIME

[[cat-users]] CRL Warning, Mats Luspa, 12/04/2025
- Re: [[cat-users]] CRL Warning, Tomasz Wolniewicz, 12/04/2025
  - Re: [[cat-users]] CRL Warning, Mats Luspa, 12/04/2025
    - Re: [[cat-users]] CRL Warning, Mats Luspa, 12/04/2025