...
The script will be executed by the dev team during initial installation, directly on one of the RADIUS servers so that the server certificate private keys are immediately on the right host and need no copying.
In principle, one calls the script addnro.py with the ISO country code of a eduroam NRO and a URL to the future CRL Distribution Point, i.e.
scripts/addnro.py
LU
http://hosted.eduroam.org/server-ca/LU.der
For initial bootstrapping, there is a list of NROs and a script
scripts/makelist.pywhich generates the needed NRO,CRLDP pairs. After running that script, the full list of all server certificates is generated with
scripts/addnro.py filename.txt
The instructions to follow are in the Git repo.
The entire process This will take a LONG while to complete.
...