An open discussion list for topics related to the geteduroam service

[Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>]

Hi Paul,

 

The profile is correct. They use a root certificate.

 

With Kind Regards

 

Stefan Paetow
Federated Roaming Technical Specialist

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp AT jabber.dev.ja.net
skype: stefan.paetow.janet

In line with government advice, at Jisc we’re now working from home and our offices are currently closed. Read our statement on coronavirus.

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.

 

 

From: <paul.dekkers AT surf.nl> on behalf of Paul Dekkers <paul.dekkers AT surf.nl>
Date: Tuesday, 8 December 2020 at 13:26
To: Stefan Paetow <Stefan.Paetow AT jisc.ac.uk>
Cc: "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
Subject: Re: geteduroam odd behaviour on Android 10?

 

Hi,

 

We identified an issue with CAT profiles that has a server certificate uploaded. We’ve fixed this for new builds for Android 11 and up, but cannot resolve this for Android 10.

 

Can you check if their CAT profile is correct? It should not list a server certificate, in fact it’s marked with a red warning in CAT. (That’s why we assumed this was rare anyway.)

 

Can’t think of other reasons at the moment, but I can diagnose further if this doesn’t solve it!

 

Regards,

Paul

 

On 8 Dec 2020, at 14:15, Stefan Paetow <geteduroam AT lists.geant.org> wrote:

 

Hi, 

 

We’ve had one of our members, Bath Spa University, evaluate geteduroam as a way to get away from the eduroam CAT app. They report that on Android, a profile installed with eduroam CAT works, but one by geteduroam doesn’t. I’ve installed an Android emulator to try and see what they see. What I see is that geteduroam sets the username correctly, it sets the outer username correctly, but it does not set (or maybe I misunderstand Android) the CA certificate as it should? I have looked at their eduroam CAT profile and they have set the CA root in their profile.

 

See the three screenshots.

<image001.png><image002.png><image003.png>

 

Are the ‘eduroam_WPA_*’ certs the ones installed by geteduroam or does geteduroam use the actual certificate names/CNs for that?

 

Thanks in advance ☺

 

Stefan Paetow
Federated Roaming Technical Specialist

t: +44 (0)1235 822 125
gpg: 0x3FCE5142
xmpp: stefanp AT jabber.dev.ja.net
skype: stefan.paetow.janet

In line with government advice, at Jisc we’re now working from home and our offices are currently closed. Read our statement on coronavirus.

jisc.ac.uk

Jisc is a registered charity (number 1149740) and a company limited by guarantee which is registered in England under Company No. 5747339, VAT No. GB 197 0632 86. Jisc’s registered office is: One Castlepark, Tower Hill, Bristol, BS2 0JA. T 0203 697 5800.