SSL Issue Ruckus

[Badaz52]

Hi everyone,

 

We want to use our domain wildcard SSL certificate with Ruckus and are having some issues. I have converted the pfx file to a pem so that Ruckus can recognise it and it installs it fine, the ZD admin login page shows a padlock and it says it is verified. The issue is that when any of our users connect their own devices to any of the WLANS they are met with "this certificate is not trusted" which many of them panic about and don't know what to do. We have it setup so they have to login using their AD credentials to access the WLAN.

 

How can the certificate show as trusted and OK on the ZD admin login page but not on any others?

[Boredguy]

Did you upload the intermediate certificate at the same time as adding your wildcard SSL?

 

We're getting it as well with a new certificate. Fine for our workstations as they have the latest root update, but student devices don't. I'm adding our root and intermediate certificates at the end of the day

Edited October 8, 2018 by Boredguy

[Badaz52]

Nope, I was trying to as I thought that might be the issue but I'm not sure how to obtain the intermediate cert and convert it to the format that ruckus recognises. I've followed a few guides that I found on google using openssl but ruckus says it doesn't recognise it as matching the certificate.

[Badaz52]

Did you upload the intermediate certificate at the same time as adding your wildcard SSL?

 

We're getting it as well with a new certificate. Fine for our workstations as they have the latest root update, but student devices don't. I'm adding our root and intermediate certificates at the end of the day

 

How are you obtaining the intermediate ones? we are using 123-reg rather than go daddy which provided an easy way of getting them in Apache format.

[Boredguy]

We get our certificates via JISC as it works out cheaper than getting a wildcard one for the few domains we need without a self signed.

They sent us the QuoVadis Root and Intermediate certificate along with our requested domain ones as part of the certificate pack. Previously then sent similar when they used a different registrar.

[torgo_uk]

Hi,

 

As i recall I had to concatenate the primary and intermediate certificates before uploading them on the zonedirector, don't forget to copy it to the 2nd ZD if you have a failover configured between 2 devices.

[tj2419]

Sorry to hijack the thread but I don't have any sort of ssl certificate on our ruckus zone director and am in need of an idiots guide on what I need to buy and how to configure it. Did you guys follow anything for it? Or have any tips? Thanks

[Boredguy]

You can just get a standard SSL certificate. Doesn't need to be anything fancy

 

Logon to the Zone Director and go to Configure -> Certificate

Fill in the Generate a Request form, with your Common name being the FQDN you want to use (I choose wifi.schooldomain.sch.uk)

This will give you a CSR file you can then send to any SSL provider you choose. I go via our ISP who places an order with the JISC. They should send you back the completed certificate file, and an intermediate and root certificate (hopefully they give you the last two)

 

You then go back to the Certificate option in the Zone Director, Select your SSL cerficiate via the Browse button in "Import Signed Certificate". If you have an Intermedate one, select the option and that certificate and repeat until all 3 are uploaded. You can then click the Apply option and it will reboot your Zone Director and the new SSL will take effect.

[torgo_uk]

This is the idiots guide we used, worked OK;

 

https://forums.ruckuswireless.com/ruckuswireless/topics/complete-ssl-certificate-import-guide-by-an-idiot

 

We use a standard wildcard SSL Cert, because we have one. Our ruckus provider suggested a Standard UCC SSL certificate as we have a redundant ZD setup.

[Jawloms]

I've just started looking at putting a certificate on my Ruckus Wi-Fi, clicked the link above and ironically it has a certificate error........

[Davit2005]

3 hours ago, Jawloms said:

I've just started looking at putting a certificate on my Ruckus Wi-Fi, clicked the link above and ironically it has a certificate error........

https://www.sslshopper.com/ssl-checker.html#hostname=forums.ruckuswireless.com

 

Even if you do follow the link you get a 404.

 

Below is what looks like the new one. Looks like they have some DNS house work to do, lol.

 

https://community.ruckuswireless.com/

Edited April 14 by Davit2005