≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:cert [12.12.2018 11:29] – [Local certificate copies (when connecting from registration network)] Pavel Valachen:verejne:sit:cert [23.09.2025 13:18] (current) – Karel Kopecký
Line 5: Line 5:
 Local copies are also available below. Local copies are also available below.
  
-**CA certificate:** \\ +**CA certificates:** \\ 
-[[https://pki.cesnet.cz/cs/ch-tcs-ssl-ca-3-crt-crl.html|TERENA SSL CA 3, DigiCert Assured ID Root CA]] (link to CESNET)+<del> 
 +[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}}) 
 +</del>
  
-**RADIUS certificate:** \\ +<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note> 
-[[https://tcs.cesnet.cz/certificate/download/1540565839|radius.sin.cvut.cz]] (link to CESNET)+**CA certifikáty:** \\ 
 +[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)
  
-//RADIUS server fingerprint:// \\ 
-SHA1: 9B 72 81 39 25 A9 0D 1C BC B7 7B 98 BE 92 32 C7 FC 4D EA B6 \\ 
-MD5: 1D BF 76 05 02 52 29 AB E1 81 54 80 AE 23 A6 CF 
-===== Local certificate copies (when connecting from registration network) ===== 
- 
-To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...** 
- 
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\ 
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}} 
 ===== Install certificates in OS Android ===== ===== Install certificates in OS Android =====
  
-First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card. +First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
- +
-{{ :verejne:sit:digicert_assured_id_root_ca.pem.crt |DigiCert Assured ID Root CA - PEM}} \\ +
-{{ :verejne:sit:digicert_assured_id_root_ca.der.crt |DigiCert Assured ID Root CA - DER}} +
  
 The following instructions differ from device to device, but they all follow the same theme: The following instructions differ from device to device, but they all follow the same theme:
Line 36: Line 26:
   * Choose **Install a certificate**.   * Choose **Install a certificate**.
     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.     * Confirm the installation.
-  * Then, during setting up Wi-Fi, select this new certificate as a **CA certificate**.+  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**.
  
 <note important> <note important>
 When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above. When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above.
 </note> </note>