Controllerless Networks

last person joined: yesterday 

Instant Mode - the controllerless Wi-Fi solution that's easy to set up, is loaded with security and smarts, and won't break your budget
Expand all | Collapse all

IAP 205, wildcard certificate for replace securelogin.arubanetworks.com

This thread has been viewed 45 times
  • 1.  IAP 205, wildcard certificate for replace securelogin.arubanetworks.com

    Posted Oct 24, 2016 11:41 AM

    Hi,

     

    Can I use wildcard certificate for replace default certificate for captive portal (securelogin.arubanetworks.com) on IAP running relase 6.5.0.0-4.3.0.0?

     

    And if it is possible, what is the procedure?

     

    Regards,

     

    EF



  • 2.  RE: IAP 205, wildcard certificate for replace securelogin.arubanetworks.com



  • 3.  RE: IAP 205, wildcard certificate for replace securelogin.arubanetworks.com

    Posted Oct 28, 2016 06:22 AM

    -resolved-



  • 4.  RE: IAP 205, wildcard certificate for replace securelogin.arubanetworks.com
    Best Answer

    Posted Oct 28, 2016 07:10 AM

    I followed these steps and works for me.

     

    Previous you need:

     

    • Wildcard certificate. Ex.: cert.crt
    • Private key of wildcard certificate. Ex.: certkey.key
    • Bundle certificate with root and intermediate certificates of CA. Ex.: bundle.crt
    • Openssl

     

    1.- Make copy of wildcard (you will need)

     

    Ex.: cert-copy.crt

     

    2.- Make bundle with wildcard and bundle.

     

    cat bundle.crt >> cert.crt

     

    3.- Make a pkcs12 certificate

     

    openssl pkcs12 –export –out certpkcs12.pfx –inkey certkey.key –in cert.crt –certfile cert-copy.crt

     

    YOU WILL BE ASKED TO SET A PASSWORD, DON´T FORGET IT

     

    4.- convert to pem format

     

    Openssl pkcs12 –in certpkcs12.pfx –out certpem.pem –nodes

     

    YOU WILL BE ASKED TO ENTER THE PASSWORD

     

    5.- Load certificate in the virtual controller

     1.jpg

    6.- Reload virtual controller.

     

    7.- Try to login and you will see that the name of the portal is “captiveportal-login.mycompany.com”

     2.jpg

     

     

    IF YOU ARE USING CLEARPASS WEB LOGIN PORTAL, YOU MUST CHANGE THIS PARAMETER INSIDE YOUR LOGIN PAGE

     3.jpg