Hi,
Since Android 4.3 the API allows one to pin all security parameters including server name. We make use of that in eduroam with the eduroam CAT app and config files which bring all the needed security settings. It is limited to one root CA though.
I have an Android 5.1 phone (Moto G gen1). I tried the CAT app but it just crashed at the point of installing the profile. I am happy to take this issue up offline with you if you like. It's possible there's a bug in the XML profile I tweaked - but I'd still hope the app wouldn't crash!
Also, its terms require prior written permission for non-educational use.
Are there any alternative apps which can use this API?
Well, the app hard-codes "eduroam" as SSID, so if you want to use it outside of eduroam you'll have problems anyway. We are in the process of changing the config format to include SSID and to update the app so it becomes more flexible. Don't hold your breath though. And for eduroam, the XML is generated by the website at https://cat.eduroam.org so no tweaking needed / expected. Curious about our terms - we're licensing Apache 2. That's fairly common. I didn't think this creates issues anywhere? If you send me your tweaked XML I can try to reproduce if you still care. As for other apps... no idea. I think we were among the very early users of this API, but maybe others are following on the same path. Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 2, avenue de l'Université L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66