Subject:
An open discussion list for topics related to the geteduroam service
List archive
- From: Paul Dekkers <paul.dekkers AT surf.nl>
- To: Darren Boss <Darren.Boss AT alliancecan.ca>
- Cc: "geteduroam AT lists.geant.org" <geteduroam AT lists.geant.org>
- Subject: Re: Problem with certificates generated
- Date: Tue, 16 Aug 2022 17:56:05 +0200
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=surf.nl; dmarc=pass action=none header.from=surf.nl; dkim=pass header.d=surf.nl; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=ua45OzafdiGDwzfc+qUA/CnExvmbgql6mvhMrPjJcF8=; b=EgcVU0bA/K369uWNrO+okWDK5PTeKpdtarWKmllxZnOSd5UA1MCcgEXoz/eq4qbLDjLJ6oKg1IZ6PE0suTL7YyGjnYnIzRMjtpDlmxhWEOOa3p6MFBfEjNrrr+txD9MucTcUDP9Rbo0jZZG+nPNwh/NN6MpXCvOa84t1iXzAq4p3o4ohH1SEyQ2Hcl1iL8Nytmh/zD3PKu55xLq1UgiTzNyQO+ta1RuKPoct3ycoVeiZamzj7s2qjBzUFo2JAyJ1MLSqXG8YzF5lIbJ0VYKRXunC+wPvoNMB+SHatJe83spyP2ihFcWPVG9x69K8ZJkiBx6yHvS9m6znTdDgv9mMqA==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=lVa9CE+lIEHVWRllj1Pdijqhw8u84xwP4OfLUhRmEoI/fWx6wMjXVrEHCi4wcLmOGieElTgJNcUml4Ac8TPFeLiRCEpr0L8NIcW+6DVd9p/OWEs9/jSkoTzXvQpAizLLFevpcF7MZdxT9/skwkYSnT8dZXtn1+VGdIgj2gSidMNPkr/Vo6UrJb0NQSCgqfeIaF0p70jy5A8MmdsEJv+lt6Pi17vpBNnpGuIi0a5GHnkekItLZf1Mi260eZry/cdVOVDRq3k9jKbbjDmNCjhFXatAWAanFyTaqbuItOFSOE/d9zCTUJJ8fRvoV+uZW9gGPCWSLH7OIO8YTBrcmMFmsQ==
- Authentication-results: dkim=none (message not signed) header.d=none;dmarc=none action=none header.from=surf.nl;
Hi,
What version of OpenSSL does your Rocky server run, and what
version of Android are you testing with?
Regards,
Paul
On 16/08/2022 17:12, Darren Boss (via
geteduroam Mailing List) wrote:
YT1PR01MB9435FBAFB7D6C22250763DDE966B9 AT YT1PR01MB9435.CANPRD01.PROD.OUTLOOK.COM">
I've been able to setup the portal app without too much trouble
but while testing with Android it wasn't working and I started
looking closely at the assets downloaded manually from the
portal. The PKCS12 button generates a file that when I try
inspecting with openssl, shows this error:
Error outputting keys and certificates
401C6D75A67F0000:error:0308010C:digital envelope
routines:inner_evp_generic_fetch:unsupported:crypto/evp/evp_fetch.c:349:Global
default library context, Algorithm (RC2-40-CBC : 0), Properties
()
When using the -legacy flag, I can convert the format and even
get my profile working with a Linux laptop and our appropriately
configured freeradius server.
The certs in the mobileconfig are using this cipher as well if I
copy out the base64 encoded string, decode, and inspect with
openssl from the command line.
The vm running the portal app is running Rocky 8.6 and PHP 7.4
from the Rocky repos. Is the error I see in the manual downloads
unusual? Any tips for doing further debugging or thoughts about
what I'm seeing? I'm thinking of deploying on a Debian based vm
just to see if the behavior is different.
Senior
Developer | Développeur Senior
343-341-2323
0000-0001-7588-9500
Archive powered by MHonArc 2.6.19.
343-341-2323
0000-0001-7588-9500