I am trying to set up EAP-TLS authentication for my wireless access points, but I can't sign my ACS certificate with my enterprise CA certificate.
If I generate a self-signed certificate on the ACS server, and try to sign it on my CA, I get an ASN tag error. It looks like that is because the ACS server is not in the certificate path of the CA server.
If I generate a certificate on the CA and try to import it into ACS, I get a "unable to parse certificate" error. Is there a way to edit the Certificate Trust List in 5.2? It looks like that was possible with 4.2, but not with the latest version.
Does anyone have any ideas what the right procedure is? I've read that you do not need the private key to sign it, but with or without it, it didn't work.
I used Openssl to extract and combine the certificates and keys.
