Wireless Access

Reply
Super Contributor II

HTTP Only Captive Portal generating certificate warnings in Android

Hi all,

 

I've just recently setup a basic Captive Portal guest solution using instant and clearpass. 

 

This setup has just a T&C acceptance so using embedded username in form.

 

To keep it simple i've just deployed with HTTP and on certificates. 

 

Redirect from IAP uses IP address and port 80 with no HTTPS. 

ClearPass redirect from login page uses HTTP to securelogin.hpe.com.

 

when the user on an android device first gets redirected ot the login page (grom the gstatic check URL) a popup error shows SSL trust errors. 

 

The exact message escapes me right now. I'm going back to site on monday to do some proper analysis but before i do thought i'd throw it out there to see if anybody else is seeing this problem.

 

android 8.0.0 

Instant 6.5.4.5

ClearPass 6.7.2

 

Scott

Re: HTTP Only Captive Portal generating certificate warnings in Android

If you see a certificate warning on gstatic, you probably need to deny traffic to HTTPS sites while in the captive portal role.

 

Check out this page for some background.

--
If you have urgent issues, please contact your Aruba partner or Aruba TAC (click for contact details).
Super Contributor II

Re: HTTP Only Captive Portal generating certificate warnings in Android

So it seems some captive portal detection methods now use HTTPS and still throw up errors when redirecting to a HTTP site.

In the end I just deployed trusted certificates and it worked fine. So much for keeping it simple! Although it is good to see vendors are properly redirecting their captive network popups now without errors.

Scott
Guru Elite

Re: HTTP Only Captive Portal generating certificate warnings in Android

Scottdoorey,

 

For the community's sake, can you please state what CA and what method you used to deploy the trusted certificate?


*Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.*
ArubaOS 8.3 User Guide
InstantOS 8.3 User Guide
Airheads Knowledgebase
Airheads Learning Videos
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: