Differences

This shows you the differences between two versions of the page.

--- en:verejne:sit:cert [26.09.2018 12:11] – [Certificates - verifying our network identity] EN links Pavel Valach
+++ en:verejne:sit:cert [23.09.2025 13:18] (current) – Karel Kopecký
@@ Line 5: / Line 5: @@
 Local copies are also available below.
-[[https://tcs.cesnet.cz/en/certificate/download/1445704998|RADIUS server certificate (PEM)]] \\
+**CA certificates:** \\
-[[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-3-crt-crl.html|CA certificates (TERENA SSL CA 3, DigiCert Assured ID Root CA)]]
+<del>
+[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}})
+</del>
-//Cryptographic signature of RADIUS certificate:// ‎CC:77:A0:85:88:CA:0C:F8:89:15:28:FB:3B:1D:70:B2:CA:10:B3:8D
+<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note>
+**CA certifikáty:** \\
-===== Local certificate copies (when connecting from registration network) =====
+[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)
-To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...**
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}}
 ===== Install certificates in OS Android =====
-First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
+First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}}
 The following instructions differ from device to device, but they all follow the same theme:
@@ Line 32: / Line 25: @@
   * Go to **Advanced Wi-Fi**. This can be hidden in a context menu.
   * Choose **Install a certificate**.
-  * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
+    * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".
+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.
-    * Then, during setting up Wi-Fi, select this new certificate as a **CA certificate**.
+  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**.
+<note important>
+When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above.
+</note>