Certificate error using webauth on guest wifi

I am trying to setup a guest wifi. We have our custom page package loaded and it looks great with our graphics, logo. Basically you have to check a box and click accept to the terms of service, and then it forwards you through to VLAN 12 in this case, which is directed to an untangle software based firewall / router with its own outside IP address.
The issue is that when you initially join the wireless network, the page at 1.1.1.1/login.htm throws a certificate error and you have to continue anyway (Internet Explorers language).
Does this mean we need to put our wildcard certificate on it for our *.domain.com (GoDaddy signed) or does it need another kind of certificate? What format would it need to be in (I have a pfx but can convert it if need be).
We are not passing any credentials, so it doesn't NEED to be https, so under Management > HTTP-HTTPS I changed WebAuth SecureWeb to Disabled. However when doing this, WebAuth is still putting https://1.1.1.1 and I get a page cannot be displayed. I take the s out of https and then the webauth page works.
So two things here, how could I just use it in http, or if preferred, what format and what kind of certificate needs to make https work in webauth? This is primarily for vendors that visit, or guests in our waiting lobby with their tablets or smartphones.
The WLC is a 5508 running 7.4.121.0.

I also tried this site as well:
http://www.packethead.net/2013/08/05/cisco-wlc-wireless-lan-controller-certificate-install-mac-os-x/
I tried it command line, and it tftp's fine in all instances above but I get:
TFTP Webauth cert transfer starting.
TFTP receive complete... Installing Certificate.
Error installing certificate.
Might have to open a case with tac if this doesn't work.
I have openssl 1.0.1j is that maybe a bad version? also every time I run it it says WARNING: can't open config file: /usr/local/ssl/openssl.cnf
Well of course not, that is a *nix based bath and this is the 64-bit windows version.
What I can get is a download from go daddy and the wildcard cert is already generated. I cannot submit a new cert request. We have this key and I've tried different ways of converting it with OpenSSL, I've imported it to windows and in the mmc for certificates exported in various formats. Nothing will work with this WLC.

Similar Messages

Getting certificate errors using hotmail

I'm getting certificate errors intermittently when using hotmail. This has been happening for the 3 days I've had my Mac.
Here's the error:
Safari can't verify the identity of the website "secure.shared.live.com".
The certificate for this website is invalid. You might be connecting to a website that is pretending to be "secure.shared.live.com", which could put
your confidential information at risk. Would you like to connect to the website anyway?
It looks like from the specific certificate error, it's a problem with "secure.wlxrs.com" (whatever that means).
Anyone have any ideas on what this is all about and how to remedy it?
Message was edited by: john114

Hi pbwpu,
Thanks for posting. Are you still having this problem? Can you post a screen shot of the message you're seeing? Give us as much detail as possible and I'm sure we'll be able to help.
Cheers
David
BTCare Community Mod
If we have asked you to email us with your details, please make sure you are logged in to the forum, otherwise you will not be able to see our ‘Contact Us’ link within our profiles.
We are sorry but we are unable to deal with service/account queries via the private message(PM) function so please don't PM your account info, we need to deal with this via our email account :-)

I get a certificate error using firefox, I have tried deleting cert8.db, and resetting Firefox. I don't have any errors using IE 10. What can I do?

I used a link in an email to check the status of a repair from Acer and received the error "customercare.acer.com uses an invalid security certificate.
The certificate is not trusted because no issuer chain was provided.
(Error code: sec_error_unknown_issuer)". I tried going directly to the Acer website, and went to support, then to check case status. I received the same error. I reactivated IE 10 on my OS and had no problems with certificate errors. I use McAfee Antivirus suite from ATT Uverse, but the troubleshooting did not indicate any settings for that, only ESET and Bitdefender.

Could you take a look at the certificate details?
If you click "I understand the risks" and "Add Exception", then the "View" button, does it look at all like the attached? I suggest using a new window to compare because when the certificate viewer is open, you cannot switch tabs in the same window.
You can cancel the viewer after checking, you may not want to create an exception until getting further comments.

How-do-i-configure-guest-wifi-access-using-2504-wlc-fortigate-utm-l3-device

Dear All
I have a 2504 Wireless Controller with multiple radios attached. I currently have a "private" WLAN configured (taking ip from windows server based DHCP of Range 192.1681.0/24 ) and working, but I need to add a Guest/Public WLAN which should take the IP from Other DHCP Configured on Fortigate UTM of range 172.16.0.0/24.
We have one SG300 switch in the office and the rest are basic switches.
Our firewall/router is a Fortigate UTM 240D
Find the attached network diagram for the issue.
Is there a SIMPLE way to enabling guest access that doesn't require VLANS (or are VLANS easier than I'm making them)?
Thanks.
- See more at: https://supportforums.cisco.com/discussion/12473186/how-do-i-configure-guest-wifi-access-using-2504-wlc-fortigate-utm-l3-device#sthash.aj1XcWI0.dpuf

Complete these steps in order to configure the devices for this network setup:
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-vlan/70937-guest-internal-wlan.html
Configure Dynamic Interfaces on the WLC for the Guest and Internal Users
Create WLANs for the Guest and Internal Users
Configure the Layer 2 Switch Port that Connects to the WLC as Trunk Port

ADF Mobile : Rest call to a webservice using https - Certificate Error

I'm trying to connect to a web service giving json and which uses https. I am using the following code.
Also SalesApp connects to https://abc.com
RestServiceAdapter restServiceAdapter = Model.createRestServiceAdapter();
restServiceAdapter.clearRequestProperties();
restServiceAdapter.setConnectionName("SalesApp");
restServiceAdapter.setRequestType(RestServiceAdapter.REQUEST_TYPE_GET);
restServiceAdapter.setRetryLimit(0);
restServiceAdapter.setRequestURI("/sales/rest/v1/resources");
try {
response = restServiceAdapter.send("");
I am getting an error of " Certificate was issued by an unrecognized entity ".
Is there anyway to ignore the certificate warning ? Any request properties which can help with this?
I'm not looking at adding any private certificates/verfying the certificate issued by server, just want to ignore the warning
and proceed with the rest call.

Hi, sure you will need to register your private certificate with ADF Mobile's embedded JVM. This is a security mechanism - the JVM we embed will only recognize certificates from well-know CA out of box. However, you can register your private certificate with the JVM. The steps are described in the ADF Mobile Developer Guide: http://docs.oracle.com/cd/E35521_01/doc.111230/e24475/security.htm#CDDCCDFF.
Please note that you will need to be very careful when registering the JVM - extra spaces for example will cause certificate error and it could be hard to diagnose. Please ensure all the fields matches exactly with your private certificate's fields.
Thanks,
Joe Huang

Certificate Error when using pub services with IE7

everytime i try to use pub services admin console i get the
following warning im using IE7 any idea how to stop this nag ? :
There is a problem with this website's security certificate.
The security certificate presented by this website was not
issued by a trusted certificate authority.
Security certificate problems may indicate an attempt to fool
you or intercept any data you send to the server.
We recommend that you close this webpage and do not continue
to this website.
Click here to close this webpage.
Continue to this website (not recommended).
More information
If you arrived at this page by clicking a link, check the
website address in the address bar to be sure that it is the
address you were expecting.
When going to a website with an address such as
https://example.com, try adding the 'www' to the address,
https://www.example.com.
If you choose to ignore this error and continue, do not enter
private information into the website.

hi,
IE 7 has changed the way certificates were handled when
compared to IE 6. In IE 6, the user gets an option to view the
certificate before proceeding to view the site. In the process the
user can import the certificate into the browsers trust store.
Since CPS is deployed with a self signed certificate, in IE 7
we get a certificate error.
There is currently no workaround for the same, except to
deploy cps war file on an application server that has a certificate
signed by a signing authority
thanks,
sudharshan

Wifi media sync certificate error

Im new to bb, and I'm trying to put music on my new curve 9380 but when I click wifi sync on my phone it says server certificate error connect to desktop software and sync to update but noting is working any help?

I'm having the same issue, was this resolved?

How can I set up a guest WiFi network using Time Capsule and Airport Express extension?

How can I set up a guest WiFi network using Time Capsule and Airport Express extension?

Sorry, but it is not possible to "extend" the Guest Network using either wireless or an Ethernet connection.

RDS 2012 - Certificate error when using RemoteApp

Have setup the RD Gateway to use port 40001 for the https transport. Internally everything works good. Can login to RD Web externally fine, but when trying to launch a RemoteApp it starts then returns a certificate error. The certificate it is showing
is for the exchange server which of course is on port 443. This is a single IP environment. From what I see happening, it is defaulting back to 443 even though it has been told to use 40001. Obviously the site connects and secures using the 40001
port, but the RemoteApps still want to fall back to 443. It this a flaw or am I missing something? I thought the whole reason of selecting another port was to use that other port.
Thanks

This power script worked like a charm for me.
Luckily this is just a lab setup, but I was racking my brains for a couple of days until I found this.
Same situation, port 443 is used for email server and needed to use an alternate SSL port.
Changing the port on the server side for the RD Web Access URL was a breeze, but changing the port for the RemoteApp collection was not as easy to figure out until I found this post.
In my situation, like I read before, when you try to run one of the apps in the collection, it will invoke the certificate that our mail server uses since it tries to use port 443 which is assigned to the mail server.
Running the script immediately fixed the problem by using the alternate port specified in the script.
Hopefully this will help tons of folks in this same situation.
PS: If I had a bunch of public IPs to work with, I would not have to use alternate ports.

Using several Airport Extremes to create and extend corporate + guest wifi

hello all,
my office has purchased 6 airport extremes for our new office, AirPort Extreme 802.11ac (6th Generation), running version 7.73
the plan was to hard wire one extreme via the wan port and create both a corporate and guest network
then link to the others throughout the office by wirelessly extending to provide complete coverage
after moving around the location of one or two units my coverage is now complete across the office space
my setup is as follows:
my network is a windows active directory setup where one of my domain controllers is my DHCP server in the range 192.168.x.x
to enable the guest network on my extremes i need to have my first hard wired (wan port) extreme unit configured in DHCP mode
this airport extreme has pulled down an ip address from my windows server in the range 192.168.x.x
the extreme then uses its own dhcp range to provide connectivity to my clients, 172.16.x.x for corporate wifi and 10.0.x.x for guest wifi
my issue is
the dhcp range that the extreme uses for all my corporate wifi users is 172.16.x.x
i cannot access any servers on my windows network 192.168.x.x by drive maps/hostnames as they are challenged for authentication
I can only access by using ip addresses instead of hostnames
all of my shares and wired users are configured to use hostnames for file shares, printers etc on my servers
the first extreme gets its DNS info from my windows dhcp server correctly but these settings are not passed down to my wifi clients
is there a way to do this ?
I have tried using the 'domain name' field on the extreme dhcp config but this had made no difference
can anyone advise on this ?
do i need to use a different setup, maybe switch to wired config ?
what i'd like to have is the following:
2 wireless networks, one for corporate users and one for guests/visitors
my corporate users to have access to all my corporate servers as their permissions allow using hostnames for access
my guest users to have internet access only
my 6 access points to be connected to each other either wired or wirelessly to provide coverage throughout my office
i was told that the 6 airport extreme's would allow me to do this but now i'm not so sure
any help or suggestions would be gratefully accepted,
thanks

You are trying to use Apple domestic products in a business setup.. this is not what they were designed for.
Could you use 3 units to cover the offices.. please have a go as this simplifies things tremendously.. just use three units in bridge.. preferably all connected to your ethernet network and so operating as AP only.
If that works then use the other 3 units for your guest network.. these should then be placed on a different vlan via your main managed switch.. so they can get internet but have no connection at all to the office network.. but other ways around it could be found. As you have already discovered a simple double NAT might sufficiently block guest access.

Attempts to use public/guest wifi yields password prompt webpage

I've had my iPhone 4s for about a month and have been unable to connect to any guest wifi accounts. EVERY time I get a webpage prompting me to ask the business for a password, rather than the page requiring that I agree not to use their connection for any illegal activities. I have no trouble connecting to our home wifi, since I've already provided the password.
I previously had a Droid and never encountered such a page. I've googled and found not a single reference to this issue, either.

See...and this is what makes no sense. No one else is receiving this prompt in the same scenario at the same moment. I have received this very same prompt from every place with free/guest wifi service. I haven't once been able to access free wifi since purchasing this phone. I never before had to enter a password with my previous phone and no one sitting at the same table with me is being required to enter a password to utilize the same wifi connection. It has to be the phone. Nothing else makes any sense. Occam's Razor, and all.
I guess now I need to figure out if this is an issue to take up with Verizon or with Apple.

Can I use multiple E4200's in bridge mode, to enable a "guest wifi' mesh?

I have four E4200 units on my network, each with an unique IP address, in bridge mode to act as a wireless mesh across my entire building. They are all connected to my central L3 switch, via their Internet ports.
Is it possible to enable the Guest network on each unit, to create a 'Guest Wifi' mesh (providing that I allow the 192.168.33.0 network to route across my network fabric), or will this not work because each indivudual AP will be assigning IP address 192.168.33.1 as it's gateway address meaning that I would have four distinct MAC addresses within the network, each trying to claim that they are IP 192.168.33.1?

As soon as you enable guest access on the router, it will start providing the IP address 192.168.33.x to the clients connecting to the guest network and we cannot change the IP address range of guest network.
Since you have 4 units (E4200), you can enable guest wi-fi of each of them however cannot create a guest wi-fi mesh as all the 4 units have different IP address.

Using 10.5.8 when open mac mail keeps giving Certificate error

trying to help someone with a mac book
10.5.8
when open mac mail keeps giving certificate error.
checked and everything seems fine with settings
ssl is not turned on for incoming and outgoing
not sure what is giving them this error and trying to assist them
any suggestions would be appreciated

* Download a new copy of the Firefox program: http://www.mozilla.com/firefox/all.html
* Trash the current Firefox application to do a clean (re)install.
* Install the new version that you have downloaded.
Your profile data is stored elsewhere in the [http://kb.mozillazine.org/Profile_folder_-_Firefox Firefox Profile Folder], so you won't lose your bookmarks and other personal data.

Wifi Sync "server certificate error"

When I try to sync my music it says "server certificate error" How do I do this?
I have a 9360 curve
And I've done a software update

Hey JenniiYiadom,
Welcome to the BlackBerry Support Community Forums.
Thanks for the question.
Follow the steps in this KB article to resolve the issue: www.blackberry.com/btsc/KB15204
Let me know if you have any more questions.
Cheers.
-ViciousFerret
Come follow your BlackBerry Technical Team on Twitter! @BlackBerryHelp
Be sure to click Like! for those who have helped you.
Click Accept as Solution for posts that have solved your issue(s)!

Remove Web-Passthrough certificate error bypass

I'm almost positive I read somewhere on the board that there was a way tp prevent the certificate error from appearing on a Web-Passthrough portal page WITHOUT installing a certificate. Will someone please post a link?

you can disable secure webauth
Cisco Controller) >config network web-auth secureweb enable/disable
Enable - Enables https for web-auth redirection.
Disable - Enables http for web-auth redirection.
HTH,
Steve
Please remember to rate useful posts, and mark questions as answered

Certificate error using webauth on guest wifi

Similar Messages

Maybe you are looking for