Install a web certificate on an Android device

Posted by martani_net on Super User See other posts from Super User or by martani_net
Published on 2009-10-13T17:20:57Z Indexed on 2010/06/01 9:55 UTC
Read the original article Hit count: 918

Filed under:
|
|
|

To gain access to WIFI at university I have to login with my user/pass credentials.

The certificate of their website (the local home page that asks for the credentials) is not recognized as a trusted certificate, so we install it separately on our computers.

The problem is that I don't take my laptop with me often to university, so I usually want to connect using my HTC Magic, but I have no clue on how to install the certificate separately on Android, it is always rejected.

[Edit2] : this is what is stated in their website

> Need for installation of official certificates CyberTrust validated by the CRU (http://www.cru.fr/wiki/scs/)


The certificates contain information certified to generate encryption keys for data exchange, called "sensitive" as the password of a user.

By connecting to CanalIP-UPMC, for example, the user must validate the identity of the server accepting the certificate appears on the screen in a "popup window". In reality, the user is unable to validate a certificate knowing, because a simple visual check of the license is impossible.

Therefore, the certificates of the certification authority (CRU-Cybertrust Educationnal-ca.ca Cybertrust and-global-root-ca.ca) must be installed prior to the browser for the validity of the certificate server can be controlled automatically.

Before you connect to the network-UPMC CanalIP you must register in your browser through the certification authority Cybertrust-Educationnal-ca.ca Download the Cybertrust-Educationnal-ca.ca, depending on your browser and select the link below :

With Internet Explorer, click on the link following.

With Firefox, click on the link following.

With Safari, click the link following.

If this procedure is not respected, a real risk is incurred by the user: that of being robbed password LDAP directory UPMC. A malicious server may in fact try very easily attack type "man-in-the-middle" by posing as the legitimate server at UPMC.

The theft of a password allows the attacker to steal an identity for transactions over the Internet can engage the responsibility of the user trapped ...

This is their website : http://www.canalip.upmc.fr/doc/Default.htm (in French, Google-translate it :))

Anyone knows how to install a web certificate on Android?

© Super User or respective owner

Related posts about wifi

Related posts about android