topic Re: Unsigned Cerficate on ACS for P-EAP? in Wireless

Unsigned Cerficate on ACS for P-EAP?

o-ziltener — Sun, 04 Jul 2021 16:55:37 GMT

Can I use instead of signed certificate from certificate authority (example verisgn) or from my own CA use an UNsigned certifcate (like what I can do with the wlse for ssl) for a proper working PEAP environment?

any input is very welcome

Re: Unsigned Cerficate on ACS for P-EAP?

scottmac — Wed, 25 Aug 2004 12:10:34 GMT

Yes, you should be able to use any valid cert, signed or not.

Good Luck

Scott

Re: Unsigned Cerficate on ACS for P-EAP?

gamccall — Thu, 26 Aug 2004 12:47:53 GMT

On the server side, you'll be fine; you can install anything you want. And a well-behaved client will give the user to view and accept or reject the server certificate if it doesn't recognize the root.

However, not all clients are well-behaved. For some, you may need to manually install the server certificate into the client before attempting to authenticate against it. This isn't an insurmountable roadblock but it is an inconvenience.

Re: Unsigned Cerficate on ACS for P-EAP?

michaelr — Wed, 01 Sep 2004 07:32:29 GMT

Just curious - what is an "unsigned cert"? I know of an X.509 cert (which is signed) but have not heard of an unsigned cert before.

Thanks,

michael

Re: Unsigned Cerficate on ACS for P-EAP?

gamccall — Wed, 01 Sep 2004 14:09:40 GMT

He should properly have said "self-signed" rather than "unsigned"... a cert issued by a server with no upstream certification path back to Verisign or other generally-recognized authority.

Re: Unsigned Cerficate on ACS for P-EAP?

o-ziltener — Wed, 01 Sep 2004 19:49:34 GMT

an unsigned cert is a cert which you produce yourself and not comes from versign or other authority!

Re: Unsigned Cerficate on ACS for P-EAP?

michaelr — Sat, 04 Sep 2004 03:29:00 GMT

So it sounds like you are actually talking about a cert not signed by an "official CA" (i.e., a CA whose cert is not pre-loaded into the browsers)?

Thanks.

Re: Unsigned Cerficate on ACS for P-EAP?

scottmac — Sat, 04 Sep 2004 21:13:14 GMT

That's correct. It's OK for verifying a qualified client, but it offers no assurance to people that the server offering / using the cert has been publicly identified and certified as who they say they are.

OK for client authentication, bad for a web site that may ask for credit card info.

FWIW

Scott