Security

Reply
Regular Contributor I

IOS 8 devices cannot establish connection to secure server

Getting cert related issues when trying to connect IOS v8 devices (tried ipods and ipads) to the Guest Captive Portal... Windows laptops, android devices, and even IPad2 IOS v7 works fine... so looks live v8 is being a bit more fussy about our cert.

 

Weve recenlty upgraded out cert which was close to expiration, and also uses an intermediary cert  and have tried various repackaging of these, but still getting same issues. 

 

Anyone encountered anything similar, def seems related to IOS8 for whatever reason...

 

 

Guru Elite

Re: IOS 8 devices cannot establish connection to secure server

If you did not have problems before you changed the certificate, the problem is the cert. What certificate was on there before?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I

Re: IOS 8 devices cannot establish connection to secure server

Its a bit tricky to say, as its not really been fully up and running, and weve had lots of other issues to deal with.. been a bit like a 10k hurdle!  Does seem odd that every other device works fine apart from IOS8!

 

The cert was in the same format as the previous, it just need replacing due to expiraiton...

Guru Elite

Re: IOS 8 devices cannot establish connection to secure server

Let's gather some facts:

 

- is it a guest portal?

- What kind of error, issue does the client have exactly?

- What are the steps do you use to reproduce the error?



Colin Joseph
Aruba Customer Engineering

Looking for an Answer? Search the Community Knowledge Base Here: Community Knowledge Base

Regular Contributor I

Re: IOS 8 devices cannot establish connection to secure server

Its hard to get any info.. as Safari doesnt really give us any other info.. I have on occasion had the little cert error pop up box.. but its anyones guess when this decides to show...

 

Portal login page shows ok, its after login.. when you should be redirected to whatever page the browser should be displaying... 

 

As I mentioned, of the 8 devices I have in front of me, only the IOS8 ones are giving me grief!  Im trying to see what I can do to obtain some more meaningful info

Regular Contributor I

Re: IOS 8 devices cannot establish connection to secure server

Def convinced its a Safari issu...

 

Steps...

 

Join guest network, open up safari and login/create account

Then get the safari error about insecure connection to server

 

If I then try Chrome.. it works fine, no errors.. just log in and away I go...  If I then try Safari, this then works  -  obvioulsy as Ive then passed the auth stages and been granted access.

 

Viewing the portal login page in chrome, shows a valid (green) cert which has been verified by DigiCert SHA2 Secure Server CA.  I can then login and get access to the internet.

 

Try to view the same in Safari, and get the error saying it cant establish a secure conneciton to the server.... so the switch to Chrome and log in!

MVP

Re: IOS 8 devices cannot establish connection to secure server

Does the certificate have a valid OCSP URL and is this accessible from the clients?

It may be related to Safari doing an OCSP check that Chrome is not.

David
ACDX #98 | ACMP | ACCP
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: