Hi Louis,

Thanks for your reply.
We have IOS devices working well using the Packetfence PKI, client 
certificates, and EAP.

Have had trouble with passthrough for agent install and our Australian Samsung 
Androids.
The Androids trust store won't trust our Packetfence PKI CA, and we can't see 
an easy way to push/change to PF cert to the devices,
hence the reason we're so looking at buying a server certificate.

>From my understanding, we won't be able to mix a trusted commercial server 
>cert with PF PKI setup?
We don't want to break the working EAP setup for IOS.
Also, would it be correct that the Android provisioner will have to use PEAP 
(no PKI EAP), and point the RADIUS server cert path to the purchased 
certificate?

Will have a look at InCommon, thank-you.

Thanks,
Dan



From: Louis Munro [mailto:[email protected]]
Sent: Tuesday, 19 April 2016 8:57 PM
To: [email protected]
Subject: Re: [PacketFence-users] SSL server certificate for use with Android



In a last ditch effort to try to get Android devices working with PacketFence,
we are looking at purchasing a server certificate from a trusted CA, that is 
included in Android's trusted root store.

Has anybody been down this path?
Any recommendations for certificate providers?

Hi Daniel,

Not sure if I missed your earlier messages to the list about this, but Android 
usually works well on PacketFence.
Can you tell us a bit more about what exactly is not working and what leads you 
to believe it's related to the certificates?

As for recommendations, a certificate is a certificate.
If it's been issued by a CA trusted by the device it should just work.

I have experience with InCommon, but that is not an exclusive endorsement.

Regards,
--
Louis Munro
[email protected]<mailto:[email protected]>  ::  
www.inverse.ca<http://www.inverse.ca>
+1.514.447.4918 x125  :: +1 (866) 353-6153 x125
Inverse inc. :: Leaders behind SOGo (www.sogo.nu<http://www.sogo.nu>) and 
PacketFence (www.packetfence.org<http://www.packetfence.org>)

________________________________

CONFIDENTIALITY NOTICE AND DISCLAIMER
The information in this transmission may be confidential and/or protected by 
legal professional privilege, and is intended only for the person or persons to 
whom it is addressed. If you are not such a person, you are warned that any 
disclosure, copying or dissemination of the information is unauthorised. If you 
have received the transmission in error, please immediately contact this office 
by telephone, fax or email, to inform us of the error and to enable 
arrangements to be made for the destruction of the transmission, or its return 
at our cost. No liability is accepted for any unauthorised use of the 
information contained in this transmission.
------------------------------------------------------------------------------
Find and fix application performance issues faster with Applications Manager
Applications Manager provides deep performance insights into multiple tiers of
your business applications. It resolves application problems quickly and
reduces your MTTR. Get your free trial!
https://ad.doubleclick.net/ddm/clk/302982198;130105516;z
_______________________________________________
PacketFence-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/packetfence-users

Reply via email to