3 ms·
Captive portals can and should have TLS enabled, even if they're internally served, there's nothing stopping you putting on a cert signed by a well known CA. T
by no_carrier 3y ago
Captive portals can and should have TLS enabled, even if they're internally served, there's nothing stopping you putting on a cert signed by a well known CA.
The way I handle it is I have the captive portal DNS name in public DNS returning a private address. When I order the CA cert from my cert provisioner of choice, I'm able to pass all verification checks. I'd use LetsEncrypt if I could, but good luck getting that going on a Cisco Wireless LAN Controller.
- Animux 3y agoI would love to know, how your captive portal is getting a valid certificate for https://google.com https://google.com. The problem is: If the first connection of the client is a https connection, your captive portal has no possibility to redirect this request to the portal.
- pixl97 3y agoMy android phone seems to handle this well, not sure how it's detecting this and doing it, but seems like something that needs set on the OS side to detect when this occurs.