topic Re: Running Captive Portal with no SSL/Certificate in General Topics

Running Captive Portal with no SSL/Certificate

u13001 — Tue, 29 May 2012 14:56:43 GMT

Hello

I am running Captive portal successfully with HTML/POST based authentication. However as I only have a self signed certificate this generates a warning in the users browser.

There is no requirement to encrypt the username/password submit to the portal in this implementation!

How can I run the Captive Portal without encryption on port 80?

Regards

Andreas Leknes

Re: Running Captive Portal with no SSL/Certificate

rmonvon — Wed, 30 May 2012 19:31:31 GMT

Hi...We support Captive Portal only in encrypted mode (SSL) to protect the user credentials. Please submit a feature request to your local Palo Alto SE if you need Captive Portal in the clear with no encryption.

May I recommend that you consider obtaining a valid SSL certificate and apply it to the redirect host in Captive Portal. The valid cert will resolve the SSL warning. Thanks.

Re: Running Captive Portal with no SSL/Certificate

u13001 — Thu, 31 May 2012 07:31:44 GMT

Allright.

Can you recommend a vendor who will provide a valid certificate for a private IP address without full organizational validation?

Re: Running Captive Portal with no SSL/Certificate

d_ballam — Thu, 31 May 2012 08:52:04 GMT

could you not use digicert with a ucc and add a san name?

Re: Running Captive Portal with no SSL/Certificate

rmonvon — Thu, 31 May 2012 13:21:21 GMT

I believe you can purchase an SSL cert for a domain,say captive.mycompany.com. On your internal DNS server, have captive.mycompany.com resolve to the IP address of the redirect host.

Also if you have your own CA server, you could have the cert issue there. Thanks.