Help for buy a real Cert (not self-signed)

[Stefan Winter]

Hi,

>> Since Android 4.3 the API allows one to pin all security parameters
>> including server name. We make use of that in eduroam with the eduroam
>> CAT app and config files which bring all the needed security settings.
>> It is limited to one root CA though.
> 
> I have an Android 5.1 phone (Moto G gen1). I tried the CAT app but it
> just crashed at the point of installing the profile. I am happy to take
> this issue up offline with you if you like. It's possible there's a bug
> in the XML profile I tweaked - but I'd still hope the app wouldn't crash!
> 
> Also, its terms require prior written permission for non-educational use.
> 
> Are there any alternative apps which can use this API?

Well, the app hard-codes "eduroam" as SSID, so if you want to use it
outside of eduroam you'll have problems anyway. We are in the process of
changing the config format to include SSID and to update the app so it
becomes more flexible. Don't hold your breath though.

And for eduroam, the XML is generated by the website at
https://cat.eduroam.org so no tweaking needed / expected.

Curious about our terms - we're licensing Apache 2. That's fairly
common. I didn't think this creates issues anywhere?

If you send me your tweaked XML I can try to reproduce if you still care.

As for other apps... no idea. I think we were among the very early users
of this API, but maybe others are following on the same path.

Greetings,

Stefan Winter

-- 
Stefan WINTER
Ingenieur de Recherche
Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et
de la Recherche
2, avenue de l'Université
L-4365 Esch-sur-Alzette

Tel: +352 424409 1
Fax: +352 422473

PGP key updated to 4096 Bit RSA - I will encrypt all mails if the
recipient's key is known to me

http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20170202/31d1b304/attachment.sig>