Smoothwall Certificates

[fiza]

I have raised a ticket with Smoothwall but thought I may get a quicker answer on here.

 

This may be a silly question but we are utilising Ruckus DPSK for staff to connect to WiFi. They need to then authenticate to Smoothwall so that it knows if they are staff or students. I have set up the Smoothwall so it redirects them to the SSL Login page but instead of going directly to the page it first throws up a certificate (page is insecure) error. I have already installed the Smoothwall HTTTPS Inspection certificate onto the device so does the SSL page require a different certificate and that is why it's throwing up the certficate error?

[bald_pig]

What certificate is it using if you check the certificate viewer in your browser?

[fiza]

What certificate is it using if you check the certificate viewer in your browser?

 

ON my test iPhone in Safari the certificate shows as not trusted when I look at the details. The certficate is just called "smoothwall"

[DGardiner]

I have raised a ticket with Smoothwall but thought I may get a quicker answer on here.

 

This may be a silly question but we are utilising Ruckus DPSK for staff to connect to WiFi. They need to then authenticate to Smoothwall so that it knows if they are staff or students. I have set up the Smoothwall so it redirects them to the SSL Login page but instead of going directly to the page it first throws up a certificate (page is insecure) error. I have already installed the Smoothwall HTTTPS Inspection certificate onto the device so does the SSL page require a different certificate and that is why it's throwing up the certficate error?

 

on your smoothwall find the page where you set which ssl cert the admin interface uses and make sure its under your CA youre currently using/deployed - you may need to set it so that its delivering the admin interface via the internal url so the hostname matches the cert etc

[TechMonkey]

When you say Ruckus DPSK, is that through CloudPath? If so you can make it so the DPSK gets the username and authenticates using that. We have it set up so the user only logs in when generating the DPSK.

[fiza]

When you say Ruckus DPSK, is that through CloudPath? If so you can make it so the DPSK gets the username and authenticates using that. We have it set up so the user only logs in when generating the DPSK.

 

It’s SmartZone

[chaplic]

Regardless if the certificate is trusted, if the URL you are calling isn’t a subject alternate name/ common name on the cert then the browser is going to throw that error. So if the URL isn’t https://smoothwall, then that’s the issue

[ibpalle]

You can create a new certificate with all the variations of the hostname users may try. IP, hostname, host and domain name. Take a look at this KB:

 

https://kb.smoothwall.com/hc/en-us/articles/360002833340

[TechMonkey]

That's the one. Speak to your supplier, you can set it up to pass the username and accounting info. I didn't set it up but it is possible.

[ITGuyNW]

I have something similar. We have Cambium wifi, so its all cloud hosted. Whenever someone logs into our staff wifi on mobile they get the unsecured non ssl login page, then they login and after a while they get timed out and have to login again.

 

So would a new CA solve this?