≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:cert [01.12.2020 21:08] – Certificates update Pavel Valachen:verejne:sit:cert [01.10.2024 00:30] (current) – Link fixes Pavel Valach
Line 6: Line 6:
  
 **CA certificates:** \\ **CA certificates:** \\
-[[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-4-crt-crl.html|CESNET – Certificate chain of TCS server certificates]]+[[https://pki.cesnet.cz/cs/ch-tcs-crt-crl.html#rsa_certifikaty_-_koren_usertrust_rsa_certification_authority|CESNET – Certificate chain of TCS server certificates]]
  
-**AAA Certificate Services (root CA)** \\ +**USERTrust RSA Certification Authority** (root CA) \\ 
-SHA1 Fingerprint – D1:EB:23:A4:6D:17:D6:8F:D9:25:64:C2:F1:F1:60:17:64:D8:E3:49 \\ +SHA1 Fingerprint – 2B:8F:1B:57:33:0D:BB:A2:D0:7A:6C:51:F7:0E:E9:0D:DA:B9:AD:8E  \\ 
-SHA256 Fingerprint–  D7:A7:A0:FB:5D:7E:27:31:D7:71:E9:48:4E:BC:DE:F7:1D:5F:0C:3E:0A:29:48:78:2B:C8:3E:E0:EA:69:9E:F4+SHA256 Fingerprint – E7:93:C9:B0:2F:D8:AA:13:E2:1C:31:22:8A:CC:B0:81:19:64:3B:74:9C:89:89:64:B1:74:6D:46:C3:D4:CB:D2
  
-**radius.sin.cvut.cz** – [[https://tcs.cesnet.cz/certificate/download-pem/1602865022|PEM]] \\ +<del> 
-SHA1 Fingerprint – 84:F2:30:06:E1:66:CF:33:08:75:EA:DA:6D:19:02:3F:7F:5F:A3:36\\ +**radius.sin.cvut.cz** – [[https://tcs.cesnet.cz/certificate/download-pem/1695315507|download in PEM format]] \\ 
-SHA256 Fingerprint – 64:C3:65:37:DC:AC:63:23:B5:19:F7:0D:87:67:69:1D:93:C0:E1:4A:81:A7:15:7B:42:40:44:53:75:47:C8:7D+SHA1 Fingerprint - 02:B0:6E:34:69:C3:F1:85:53:3A:EB:63:29:F6:69:F5:3B:71:F5:A6 \\ 
 +SHA256 Fingerprint - 20:DE:B4:DA:69:AA:0E:45:19:5C:5D:5C:F3:1E:47:B9:97:BD:D5:23:F0:F0:66:C7:CB:1B:45:37:61:CE:9A:44 
 +</del>
  
 +**radius.sin.cvut.cz** – [[https://tcs.cesnet.cz/certificate/download-pem/1726768050|download in PEM format]] \\
 +SHA1 Fingerprint - B2:17:59:F3:41:3D:32:B3:7E:B3:D4:D2:4C:03:5E:8E:D9:D5:FF:F0 \\
 +SHA256 Fingerprint - 99:7A:FB:28:47:D4:5E:FD:29:7F:60:8B:42:8C:9F:9F:46:AF:0A:72:7B:9C:C0:DD:B3:9C:04:0F:39:99:83:96
 ===== Local certificate copies (when connecting from registration network) ===== ===== Local certificate copies (when connecting from registration network) =====
  
 To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...** To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...**
  
-{{ :verejne:sit:aaa_certificate_services.pem.crt |AAA Certificate Services - PEM format}}+{{ :verejne:sit:usertrust_rsa_certification_authority.crt |USERTrust RSA Certification Authority - download in DER format}} or 
 +{{ :verejne:sit:usertrust_rsa_certification_authority.pem.crt |PEM format}} 
 + 
 +(one or the other will work)
  
 ===== Install certificates in OS Android ===== ===== Install certificates in OS Android =====
Line 26: Line 34:
 First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card. First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
  
-{{ :verejne:sit:aaa_certificate_services.pem.crt |AAA Certificate Services - PEM format}} +{{ :verejne:sit:usertrust_rsa_certification_authority.pem.crt |USERTrust RSA Certification Authority - download in PEM format}}
  
 The following instructions differ from device to device, but they all follow the same theme: The following instructions differ from device to device, but they all follow the same theme:
Line 37: Line 44:
   * Choose **Install a certificate**.   * Choose **Install a certificate**.
     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.     * Confirm the installation.
-  * Then, during setting up Wi-Fi, select this new certificate as a **CA certificate**.+  * Then, [[en:verejne:sit:wi-fi:android|during setting up Wi-Fi]], select this new certificate as a **CA certificate**.
  
 <note important> <note important>
 When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above. When you remove the Sincoolka Wi-Fi settings, the saved certificate might also get removed. Therefore, you might need to repeat the procedure above.
 </note> </note>