An open discussion list for topics related to the geteduroam service

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi Marin,

On 31/01/2021 23:38, Martin Pauly wrote:
> Hi,
>
> I have a BQ Auqaris X Pro running Lineage 17.1
> I removed eduroam and our second SSID umrnet_staff from the WiFi 
> settings.
> I called geteduroam, entered the data and got the success message.
>
> A look at the WiFi settings showed that the root cert is available
> (probably installed by CAT before), but the setting still says "Please 
> Select".
> Sounds dangerous to me, what can we do about it ?

I myself overlooked this mail, sorry for that.

I understand your concern; if you have just one intermediate certificate 
it is displayed properly. If you have multiple, like with the TCS 
service popular in our community, it is not displayed properly in the 
settings. Instead, the settings show a red warning that you still need 
to pick one: but that's because the UI can't handle. It's just a 
limitation of the UI, the certificates are installed and used. So it's 
not insecure.

To be extra sure, I verified; and it's indeed not just the API returning 
"things are OK", but they are actually OK. I was unable to get online 
with a certificate from the same CA but with a different name, or one 
from other CA with the same name for that matter.

Regards,
Paul