≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:cert [27.10.2020 14:02] – [Install certificates in OS Android] Pavel Valachen:verejne:sit:cert [23.09.2025 13:18] (current) – Karel Kopecký
Line 1: Line 1:
 ====== Certificates - verifying our network identity ====== ====== Certificates - verifying our network identity ======
- 
-<note important>We are providing temporary Let's Encrypt certificates, and will present a permanent solution as it becomes available.</note> 
  
 In case you need our RADIUS server certificate, or the Certificate Authority certificate, we offer download below. In case you need our RADIUS server certificate, or the Certificate Authority certificate, we offer download below.
Line 7: Line 5:
 Local copies are also available below. Local copies are also available below.
  
-**CA certificate:** \\ +**CA certificates:** \\ 
-[[https://letsencrypt.org/certificates/#root-certificates|ISRG Root X1]]+<del> 
 +[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}}) 
 +</del>
  
 +<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note>
 +**CA certifikáty:** \\
 +[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)
  
-===== Local certificate copies (when connecting from registration network) ===== 
- 
-To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...** 
- 
-{{ :verejne:sit:wi-fi:isrgrootx1.pem.crt |ISRG Root X1 - format PEM}} \\ 
-{{ :verejne:sit:wi-fi:isrgrootx1.der.crt |ISRG Root X1 - format DER}} 
 ===== Install certificates in OS Android ===== ===== Install certificates in OS Android =====
  
-First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card. +First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
- +
-{{ :verejne:sit:dst_root_ca_x3.pem.crt |DST Root CA X3 - format PEM}} +
  
 The following instructions differ from device to device, but they all follow the same theme: The following instructions differ from device to device, but they all follow the same theme:
Line 32: Line 26:
   * Choose **Install a certificate**.   * Choose **Install a certificate**.
     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.     * Confirm the installation.
-  * Then, during setting up Wi-Fi, select this new certificate as a **CA certificate**.+  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**.
  
 <note important> <note important>
 When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above. When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above.
 </note> </note>