Security

We got a few clientes which dont want this ssl error

I was reading this

https://community.arubanetworks.com/t5/Controller-Based-WLANs/How-to-replace-Captive-Portal-SSL-certificate-and-get-NO-invalid/ta-p/179946

 

It says that we need to use linux to generate CSR Request

But what happens if we Generate it with the controller

IS there any difference????

 

Also

If i put it to use HTTP instead of HTTPS i guess ill get rid of the error.  But then that would be insecure right? as user and pass will be on clearpatext?

Any thoughs on this last one?

 

Cheers

Carlos

It's recommended to use an external server to generate the key pair so you have a backup of the private key and/or so you can use the cert on multiple servers. It's not a requirement though. Take a look at the FAQ.