eduroam Development VC Minutes 2026-06-02

Attendance

Attendees

  • Stefan Winter (RESTENA)
  • Maja Górecka-Wolniewicz (PCSS)
  • Louis Twomey (Asiera)
  • Ed Kingscote (CANARIE)
  • Alan DeKok (InkBridge)
  • Tomasz Wolniewicz (PCSS)
  • Jan-Frederik Riekers (DFN)
  • Martin Stanislav
  • Zbigniew Ołtuszyk (PCSS)
  • Paul Dekkers (SURF)
  • Christian Rohrer (Switch)
  • Mary Bull (Internet2)
  • Frederic Gerber (Switch)
  • Janos Mohacsi (Pro-M)

Regrets

  • Zenon Mousmoulas (GRNET)
  • Stefan Paetow (Jisc) (co-hosting an eduroam Fundamentals webinar)
  • Ed Wincott (Jisc) (co-hosting an eduroam Fundamentals webinar)
  • Mohit Sharma (CANARIE) (attending CANHEIT)

Agenda / Proceedings

  1. Welcome / Agenda Bashing

  2. CAT / Managed SP

    • final tests for new release 2.2.2
    • pre-release version planned for TNC
    • translation round imminent
    • Managed SP: TLS-PSK was tested, now with code in FreeRADIUS 3.2.9

2a. TLS-PSK in general

  • Now working well between radsecproxy and FreeRADIUS 3, bidirectionally
  • TLS-PSK still missing in Radiator 4.x, nudging ongoing
  • not in Radiator 10 nor FreeRADIUS 4 either (committed now, waiting for CI to merge)
  • let’s have some discussion/hands-on during TNC27
  1. geteduroam
    • Apple App Store listing still not approved.

3a. IdP server cert CA rollover:

  • is possible in geteduroam, but maybe not optimally documented
  • in general: provision old and new CA together, such that devices are pre-loaded
  • if not done correctly (i.e. not using an installer), users get a prompt for accepting a new certificate and be alerted; surprisingly many users would probably not care and just click OK
  1. IETF
  • No update on RADEXT charter.

  1. WFA / WBA

  2. Event Announcements / Wrap-ups

  3. AOB

  4. Next call 30 Jun 2026, 1530 CEST

  • No labels