UPDATE ......From Tuesday 8 April 2025 we have changed the way that Single Sign-on works on this wiki. Please see here for more information: Update

Page History

Versions Compared

Key

This line was added.
This line was removed.
Formatting was changed.

...

Info

IMPORTANT: adapt the settings/openssl-rsa.cnf and settings/openssl-ecdsa.cnf settings before issuing the CA. In particular:

~~crlDistributionPoints~~
caIssuers;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-root/cacert.pemcrt respectively http://ocsp.hosted.eduroam.org/ecdsa/user-root/cacert.pemcrt
OCSP;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-root/ocsp respectively http://ocsp.hosted.eduroam.org/ecdsa/user-root/ocsp

For reference: the end user certificates created by the intermediate CA will have the following URLs for these fields:

caIssuers;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-intermediate-1/cacert.pemcrt respectively http://ocsp.hosted.eduroam.org/ecdsa/user-intermediate-1/cacert.pemcrt
OCSP;URI.0 = http://ocsp.hosted.eduroam.org/rsa/user-intermediate-1/ocsp respectively http://ocsp.hosted.eduroam.org/ecdsa/user-intermediate-1/ocsp

...