Reply
Thread Tools
Posts: 5 | Thanked: 0 times | Joined on Jul 2007
#1
My University wireless uses the pretty standard WPA-TKIP/EAP/MSCHAPv2 setup, but being tightwads they use a self-signed certificate. On win/mac machines we are instructed to uncheck the option to verify the server certificate, however no such option exists on the 770. Not surprisingly it will not connect to the wireless network complaining "No CA certificates available to validate server certificate." Is there any way to get the 770 to not validate the server certificate like windows or mac machines? I am comfortable with the shell, but I just have no idea where to begin poking around in config files.
 
iball's Avatar
Posts: 729 | Thanked: 19 times | Joined on Mar 2007
#2
Woah....good damn question. Have you already loaded/saved a copy of their public cert on your N770? If not, import it in certificate manager within control panel and set it up to "trust" it explicitly. You might also need the root certificate from the signing server as well.
Anyway to just have them enter your 770's MAC address into their system so you can avoid the whole idiot login thing?
I love it when IT folks just crank out their own self-signed certs for publicly-deployed services.
It really defeats the frickin' purpose of the whole certificate system.
If I were you I would go yell at the dean or whomever and tell them to conform to standards. A cert for a uni should only cost about a grand and last 4-5 years.
And for a university $1000 for anything is a drop in the bucket compared to how much money they scam from everyone.

more info on it all here

Last edited by iball; 2007-09-07 at 23:19.
 
Posts: 9 | Thanked: 1 time | Joined on Aug 2007
#3
I had a similar issue with my university. I gave the IT department people the MAC address of my 770 and was able to connect to the wireless network of my university without any problems. Hope this helps. All the best.
 
Posts: 5 | Thanked: 0 times | Joined on Jul 2007
#4
I can probably get the certs from IT, I know the right people to ask. I'll update if I can get anywhere with that, and what I needed to get it working.

I agree self-signing is sort of dumb. While it will let you freely encrypt the connection it still leaves the client open to malicious individuals spoofing the SSID who will then get to steal your university login credentials (brilliant!) Considering my university just implemented wired authentication I'm still surprised they do this. Now that it's directly affecting me via my 770 I should probably ask them getting a legit certificate....
 
Reply

Thread Tools

 
Forum Jump


All times are GMT. The time now is 05:45.