Hi Louis,
Thanks for your reply.
We have IOS devices working well using the Packetfence PKI, client
certificates, and EAP.
Have had trouble with passthrough for agent install and our Australian Samsung
Androids.
The Androids trust store won't trust our Packetfence PKI CA, and we can't see
an easy way to push/change to PF cert to the devices,
hence the reason we're so looking at buying a server certificate.
>From my understanding, we won't be able to mix a trusted commercial server
>cert with PF PKI setup?
We don't want to break the working EAP setup for IOS.
Also, would it be correct that the Android provisioner will have to use PEAP
(no PKI EAP), and point the RADIUS server cert path to the purchased
certificate?
Will have a look at InCommon, thank-you.
Thanks,
Dan
From: Louis Munro [mailto:[email protected]]
Sent: Tuesday, 19 April 2016 8:57 PM
To: [email protected]
Subject: Re: [PacketFence-users] SSL server certificate for use with Android
In a last ditch effort to try to get Android devices working with PacketFence,
we are looking at purchasing a server certificate from a trusted CA, that is
included in Android's trusted root store.
Has anybody been down this path?
Any recommendations for certificate providers?
Hi Daniel,
Not sure if I missed your earlier messages to the list about this, but Android
usually works well on PacketFence.
Can you tell us a bit more about what exactly is not working and what leads you
to believe it's related to the certificates?
As for recommendations, a certificate is a certificate.
If it's been issued by a CA trusted by the device it should just work.
I have experience with InCommon, but that is not an exclusive endorsement.
Regards,
--
Louis Munro
[email protected]<mailto:[email protected]> ::
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x125 :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and
PacketFence (www.packetfence.org<http://www.packetfence.org>)
________________________________
CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by
legal professional privilege, and is intended only for the person or persons to
whom it is addressed. If you are not such a person, you are warned that any
disclosure, copying or dissemination of the information is unauthorised. If you
have received the transmission in error, please immediately contact this office
by telephone, fax or email, to inform us of the error and to enable
arrangements to be made for the destruction of the transmission, or its return
at our cost. No liability is accepted for any unauthorised use of the
information contained in this transmission.
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users