Controllerless Networks

Reply
SPB
Occasional Contributor I
Posts: 5
Registered: ‎04-05-2017

Aruba Central, Guest Access Captive Portal certificate

Hi,

I'm trying to update the certificate for Captive Portal through Aruba Central so i can finally update the IAP firmware.

I decided to get a Public Certificate from a Certificate Authority so user's wouldn't have any security errors when getting access to internet.

To create the certificate i followed the steps from this "How To" that i found after reading a post in the forum;

"How to Create a Certificate for Instant Captive Portal using Open SSL and a Certificate Authority"
https://community.arubanetworks.com/t5/Controller-less-WLANs/How-to-Create-a-Certificate-for-Instant-Captive-Portal-using/ta-p/277025

I managed to install a certificate through Aruba Central and then assign it to Captive Portal and Auth Server.

Now, when android and windows users connect to the network they get a Security Warning, they can continue but get a “Untrusted certificate” message in the browser.

If I check the certificate I am warned that the website doesn’t match the certificate name. I had to create the certificate with the common name of a domain I have access to, in this case it was wifi.xxx.xx.

 

Is this the right procedure to generate a certificate for Aruba Central Captive Portal?


Thank you

Guru Elite
Posts: 8,794
Registered: ‎09-08-2010

Re: Aruba Central, Guest Access Captive Portal certificate

Do you have a publicly signed certificate?


Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
SPB
Occasional Contributor I
Posts: 5
Registered: ‎04-05-2017

Re: Aruba Central, Guest Access Captive Portal certificate

Yes, its a publicly signed certificate from Comodo.

 

I have tried to change the Aruba Central > Guest Access > Splash Page Configuration > Override Common Name to match the one used to generate the Public Certificate (wifi.xxx.xx).

 

The Certificate Usage Type is Auth Server and Captive Portal.

 

Android phone users get the following error when connecting:

 

Name of the web site doesn’t match the one in the certificate.

Emited for:

Common Name:

wifi.xxx.xx

 

Any ideia why is this happening with Android phones?

New Contributor
Posts: 2
Registered: ‎04-11-2017

Re: Aruba Central, Guest Access Captive Portal certificate

Hello SPB:

 

Have you found the solution to this issue? I am getting trouble with this situation too. And  the Aruba Central documentation does not help at all.

 

Thank you in advance

SPB
Occasional Contributor I
Posts: 5
Registered: ‎04-05-2017

Re: Aruba Central, Guest Access Captive Portal certificate

Hi aaronmacias:

 

Not yet, but i'm corrently working on finding a solution with aruba support. I will get you posted if i get any solution.

New Contributor
Posts: 2
Registered: ‎04-11-2017

Re: Aruba Central, Guest Access Captive Portal certificate

Thanks a lot SPB:

 

I appreciate your help.

I will try with a certificate from Geo trust, I hope it works.

 

Good day.

Search Airheads
Showing results for 
Search instead for 
Did you mean: