≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision		Previous revision
en:verejne:sit:cert [26.09.2018 12:10] – created Pavel Valachen:verejne:sit:cert [23.09.2025 13:18] (current) – Karel Kopecký
Line 5: Line 5:
 Local copies are also available below. Local copies are also available below.
  
-[[https://tcs.cesnet.cz/certificate/download/1445704998|RADIUS certifikát (PEM)]] \\ +**CA certificates:** \\ 
-[[https://pki.cesnet.cz/cs/ch-tcs-ssl-ca-3-crt-crl.html|CA certifikáty (TERENA SSL CA 3, DigiCert Assured ID Root CA)]]+<del> 
 +[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}}) 
 +</del>
  
-//Cryptographic signature of RADIUS certificate:// ‎CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D +<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note> 
- +**CA certifikáty:** \\ 
-===== Local certificate copies (when connecting from registration network) ===== +[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)
- +
-To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...** +
- +
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\ +
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}}+
  
 ===== Install certificates in OS Android ===== ===== Install certificates in OS Android =====
  
-First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card. +First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
- +
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\ +
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}} +
  
 The following instructions differ from device to device, but they all follow the same theme: The following instructions differ from device to device, but they all follow the same theme:
Line 32: Line 25:
   * Go to **Advanced Wi-Fi**. This can be hidden in a context menu.   * Go to **Advanced Wi-Fi**. This can be hidden in a context menu.
   * Choose **Install a certificate**.   * Choose **Install a certificate**.
-  * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.) +    * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.) 
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.     * Confirm the installation.
-    * Then, during setting up Wi-Fi, select this new certificate as a **CA certificate**.+  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**. 
 + 
 +<note important> 
 +When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above. 
 +</note>