Ruckus Certificate - Cheapest way to add SSL

[tj2419]

I want to set up a certificate to make joining our BYOD network a little easier.

 

What is the cheapest way to do this? Can i create a self signed one or would we need to purchase one?

 

If so what am i looking for? Also any guides on how to set it up?

 

Cheers

[Arthur]

Can I create a self signed one or would we need to purchase one?

You would want a proper certificate. I purchased one for our ZoneDirector from NameCheap for $26.85 for 3 years.

 

www.namecheap.com/security/ssl-certificates/domain-validation.aspx

 

^ The cheapest PositiveSSL certificate is fine.

 

There's a guide below that you may find useful although it doesn't include all of the steps.

 

https://adamwelch.com/2013/03/ruckus-wifi-security-certificate

Edited August 1, 2016 by Arthur

[Boredguy]

We purchased one from JaNet via our ISP, but the blasted certificate used was one that was not a trusted party one.

However as it only cost us £35 for 3 years it wasn't too bad. Hopefully when we renew it should get a proper trusted certificate as the last couple were issued by QuoVadis and not TERENA

[pete]

We too, use Namecheap. We've also used LetsEncrypt for a couple of things that're smart enough to renew their certs automatically.

[IrritableTech]

We used a free certificate from StartSSL. As long as your build a full certificate using the intermediate certs it works fine on all devices we've tested.

[tj2419]

We used a free certificate from StartSSL. As long as your build a full certificate using the intermediate certs it works fine on all devices we've tested.

 

I set a certificate up via startssl and imported both the certificate and the intermediate cert.

 

When users join the network it redirects them to the correct URL wifi.schoolname.sch.uk. But then doesn't load the login page. It has an external IP set up to sent users from that url to the IP of the zone director. Any ideas what this could be?

 

iPad just says "Safari cannot open the page because the network connection was lost".

[IrritableTech]

I set a certificate up via startssl and imported both the certificate and the intermediate cert.

 

When users join the network it redirects them to the correct URL wifi.schoolname.sch.uk. But then doesn't load the login page. It has an external IP set up to sent users from that url to the IP of the zone director. Any ideas what this could be?

 

iPad just says "Safari cannot open the page because the network connection was lost".

 

And you have a wifi.schoolname.sch.uk entry in your local DNS servers? Otherwise it will be looking to your public DNS servers for schoolname.sch.uk for a wifi A name and getting nothing.

[IrritableTech]

I set a certificate up via startssl and imported both the certificate and the intermediate cert.

 

When users join the network it redirects them to the correct URL wifi.schoolname.sch.uk. But then doesn't load the login page. It has an external IP set up to sent users from that url to the IP of the zone director. Any ideas what this could be?

 

iPad just says "Safari cannot open the page because the network connection was lost".

 

Just having another thought... I found the intermediate certificate import doesn't work correctly on my version of the ruckus firmware (we're using an old one now so yours might not be an issue) and I had to manually build one certificate to import from the three certificates. Let me try and explain...

 

Make a copy of your supplied certificate wifi.schoolname.sch.uk.crt

Open the copy in notepad.

It will show something along these lines:

 

-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/Your+CerTif1c4tE
-----END CERTIFICATE-----

 

Now open the Intermediate certificate as supplied by StartSSL in notepad and copy every last character. Paste this immediately below your new copy of your certificate. It'll end up looking like this...

 

-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/Your+CerTif1c4tE
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/THe+InTerMedi4Te+CerTif1c4tE
-----END CERTIFICATE-----

 

Finally do the same copying exercise for the root certificate supplied by StartSSL...

 

-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/Your+CerTif1c4tE
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/THe+InTerMedi4Te+CerTif1c4tE
-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----
LoTs/0F+RanD0M/StuFf+Fr0M/THe+R00T+CerTif1c4tE
-----END CERTIFICATE-----

 

Then import that into your Ruckus controller.

 

It may well be a DNS issue, but I know I need to remember this process every year or two so it's handy to pop here anyway even if it doesn't help anyone else!

[tj2419]

Thanks, i'm off at the moment but will check it out when i'm in next week. Cheers