≪ View Page

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
en:verejne:sit:cert [23.10.2021 13:49] – [Certificates - verifying our network identity] Pavel Valachen:verejne:sit:cert [23.09.2025 13:18] (current) – Karel Kopecký
Line 6: Line 6:
  
 **CA certificates:** \\ **CA certificates:** \\
-[[https://pki.cesnet.cz/en/ch-tcs-ssl-ca-4-crt-crl.html|CESNET – Certificate chain of TCS server certificates]]+<del> 
 +[[https://pki.cesnet.cz/cs/certificates-tcs.html?redirect=1#hellenic_academic_and_research_institutions_rootca_2015_korenovy_certifikat|CESNET – CA for server certificatesh]] ({{ :verejne:sit:crt-hellenic-academic-and-research-institutions-rootca-2015.pem|HARICA RootCA 2015 - local copy in PEM format}}) 
 +</del>
  
-**AAA Certificate Services (root CA)** \\ +<note warning>We are temporarely using [[https://letsencrypt.org/certificates/|Let's Encrypt]] certificates, use verification against system certificates</note> 
-SHA1 Fingerprint – D1:EB:23:A4:6D:17:D6:8F:D9:25:64:C2:F1:F1:60:17:64:D8:E3:49 \\ +**CA certifikáty:** \\ 
-SHA256 Fingerprint–  D7:A7:A0:FB:5D:7E:27:31:D7:71:E9:48:4E:BC:DE:F7:1D:5F:0C:3E:0A:29:48:78:2B:C8:3E:E0:EA:69:9E:F4 +[[https://crt.sh/?caid=7394|ISRG Root X1 (Let's Encrypt root CA)]] (**{{ :verejne:sit:isrg_root_x1.pem | ISRG Root X1 - local copy in PEM format}}**)
- +
-**radius.sin.cvut.cz** – [[https://tcs.cesnet.cz/certificate/download-pem/1634915845|PEM]] \\ +
-SHA1 fingerprint - 60:2F:BD:92:F8:DF:33:63:F7:BE:18:2B:78:AC:14:98:43:4D:1C:AD \\ +
-SHA256 Fingerprint - FD:67:29:C1:F2:5C:A0:1D:25:AE:15:BB:74:03:D7:28:09:C5:5B:4F:4E:E4:A3:37:88:06:C4:42:93:CC:EA:3A +
- +
-===== Local certificate copies (when connecting from registration network) ===== +
- +
-To save these to your device, right-click/tap-and-hold on these links and select **Save link as...** / **Save target as...** +
- +
-{{ :verejne:sit:aaa_certificate_services.pem.crt |AAA Certificate Services - PEM format}}+
  
 ===== Install certificates in OS Android ===== ===== Install certificates in OS Android =====
  
-First, download these certificates into your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card. +First, download certificates from above (highlighted in bold) your Android device. We recommend using Chrome or integrated browser to perform the download, or download them using your laptop/computer and transfer to your Android using a USB cable or an SD card.
- +
-{{ :verejne:sit:aaa_certificate_services.pem.crt |AAA Certificate Services - PEM format}} +
  
 The following instructions differ from device to device, but they all follow the same theme: The following instructions differ from device to device, but they all follow the same theme:
Line 37: Line 26:
   * Choose **Install a certificate**.   * Choose **Install a certificate**.
     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)     * A file browser should open. Find your downloaded certificate file (usually in "Downloads" directory) and tap the file. (You only need to install one of the PEM/DER. If one fails, try the other one.)
-    * Follow the instructions on your device. Choose a name for the certificate, like "DigiCert" or "Sincoolka".+    * Follow the instructions on your device. Choose a name for the certificate, like "UserTrust CA" or "Sincoolka".
     * Choose Wi-Fi as a certificate type, if possible.     * Choose Wi-Fi as a certificate type, if possible.
     * Confirm the installation.     * Confirm the installation.