Aruba Instant & Cloud Wi-Fi

Reply
Frequent Contributor I
Posts: 108
Registered: ‎05-31-2015

Certificate installation

I am trying to add a public certificate to an instant cluster running 6.4.0.2-4.1.0.0_44004 and although the gui says that the upload was successful for both "auth server" and "captive portal server" types I don't see any evidence of the cert on the device. I am unable to verify if its being used by captive portal as its on a remote customer site but its certainly not being used for login to the Webui. Is there a way to verify if the cert is on the device? Do I have to do something in additiona to uploading it for it to be used?

Frequent Contributor I
Posts: 108
Registered: ‎05-31-2015

Re: Certificate installation

TAC have replied that the order in which you append the items in the pem file is different from that of the format required by the controller. It seems the private key should be appended before the public key. The customer hasn't supplied a public key - is this something I can get hold of from the CA?

Guru Elite
Posts: 8,048
Registered: ‎09-08-2010

Re: Certificate installation

The public key is the certificate that the CA gives you.

Tim Cappalli | Aruba ClearPass TME
@timcappalli | ACMX #367 / ACCX #480 / ACEAP / CWSP
Frequent Contributor I
Posts: 108
Registered: ‎05-31-2015

Re: Certificate installation

Thanks Tim, I put the private key at the start as TAC suggested but it hasn't made a difference - it still does'nt accept the certificate.

Occasional Contributor II
Posts: 11
Registered: ‎05-14-2015

Re: Certificate installation

When uploading Choose certificate type: captive portal server.

Build your pem in this order:

private key

Public key

Intermediate CA (if you have more than one include them all in the order your vendor says is 1st, 2nd etc...)

 

I did not have to include my vendors AddTrustExternalCARoot, but I did have 2 intermediates.   

Frequent Contributor I
Posts: 108
Registered: ‎05-31-2015

Re: Certificate installation

The certificate is fine the issue lies in the Instant code, here is the explanation from TAC -

"This issue has been reported internally already with the Engineering team. As per their update, they changed the SSL library in the initial codes. Hence, it could not support kinds of certificates."

Guru Elite
Posts: 20,416
Registered: ‎03-29-2007

Re: Certificate installation

What kinds of certificates?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Frequent Contributor I
Posts: 108
Registered: ‎05-31-2015

Re: Certificate installation

TAC are unable to say as the code is "very old".

Search Airheads
Showing results for 
Search instead for 
Did you mean: