An open discussion list for topics related to the geteduroam service

[Paul Dekkers <paul.dekkers AT surf.nl>]

Hi Wenche,

@list; for people that are unaware of the "hosted version" Wenche is talking about, this hasn't been advertised here yet (I think) but a bit more can be found at:
https://wiki.geant.org/display/gn43wp5/geteduroam+for+NROs+and+IdPs%2C+proposal+for+pilot+service

Basically, it allows you to connect an eduGAIN IdP to a hosted version of a pseudo-account service for geteduroam (comparable to and complementing the managed IdP, with eduroam credential creation based on eduGAIN authentication instead of invites).

On 12/03/2021 12:03, Wenche Backman-Kamila wrote:

1294031521.7589101.1615546999290.JavaMail.zimbra AT csc.fi">

Hi,

While taking geteduroam into use we'd like to report the following:

- You seem to use old crypto (CBC) for 'https://get.eduroam.org'. Is it possible to support also modern GCM crypto. We had to make an exception for this entity ID to make it work, but it works now.

Of course! We do support GCM, but *also* CBC, I think that's where the problem is? Do you have a pointer to eduGAIN guidelines for this, if there are any? I wasn't aware about a requirement.

And I'm afraid I looked no further than the A+ rating of ssllabs that we already had ;-) We still are A+, but with less ciphers. Hope this works out better.

1294031521.7589101.1615546999290.JavaMail.zimbra AT csc.fi">

- CSC has been added to the institution list on Windows 10, but I cannot see CSC in the institution list in Android 10 (tested with both Samsung and Motorola). How come?

We actually improved the metadata creation very recently to reduce stale sessions in cache; I myself see CSC (with 2 profiles) on Android. Don't you?

Regards,
Paul