Welcome / Agenda Bashing
geteduroam: patchlevel updates, feedback?
- https://github.com/geteduroam/apple-app/issues/86#issuecomment-1892542868 (update to 2.0 ignores/disables the config from previous installs )
- encrypted TLS certificates from hosted eduroam with certs with pin protected certs (item being worked on as of Jan 16)
- issues are known and taken care of by the team
- (iOS) forgotten profiles during update 1.x to 2.0: need to live with, communication problem, not code; within 2.x release train, should not happen
- Let’s keep track of the neuralgic spots we saw in this release and test for those same issues going forward (normal test plan refinement)
- automated testing? Difficult.
- Share the tests that have been run in earlier releases -> checklist for future releases.
- Needs volunteers - testing can not be a one-man job. (CP:+1… diversity in testing and a checklist at a known location and dated given things change surprisingly rapidly)
CAT feature requests
- Add a CAT API call for all info about a federation: combination of DATADUMP-FED and existing STATISTICS-INST calls (maybe an extension to STATISTICS-FED?)
See https://github.com/GEANT/CAT/issues/291 - Read-only mode for fed admins
- show/warn expired intermediate or root CAs in admin mode (code complete, pending rollout)
- ideally, enforce that anon outer ID is set when IdP wants to enable OpenRoaming support (this happens on the supplicant? check the IdP if anonymous auth is supported?)
See https://github.com/GEANT/CAT/issues/290
eduroam database location info
IETF / EAP-FIDO updates
EAP-FIDO: dns-dir, FIDO Alliance liaison replies pending
radext: TLS-PSK is in last call; open Q: status of document
OpenRoaming
AOB / next VC