Link to home
Start Free TrialLog in
Avatar of Anthony Purcell
Anthony Purcell

asked on

secure SSL solution for Radius on a .local domain

We have just deployed a Cisco Meraki wifi solution and are trying to set up our wifi networks. However the domain is setup as XX.local.
the commercial cert authorities will not  give  a trusted certificate for XX.local, so we a trying to work out how to deploy a SSL that  is trusted to make wifi for things such as BYOD work seeamlessly , We have considered self-signed but that shows as untrusted, we also need to open  up security on trusted machines to allow it. Has anybody done this or got a good idea
Avatar of arnold
arnold
Flag of United States of America image

Self signed is the way to go, once the self signed public certificate is imported as a trusted issuer, the alerts will stop. Every time the cert is renewed with new key the process needs to be repeated.

OpenSSL can be used to establish an internal CA. ....
If you have a Windows server, certification Authority is a role that can be added...
This question needs an answer!
Become an EE member today
7 DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform.
View membership options
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.