I’ve setup a new wifi network including a Freeradius server. Everything works fine except that Apple iOS gives a ‘certificate not verified’ warning when connecting. When the user accept the certificate, everything works fine.
I’ve verified the certificate chain and everything is ok. OSX and Ubuntu for example do the same check when connecting and they give me a green ‘verified’-status.
How can I get a ‘verified’-status on Apple iOS without supplying a .mobileconfig-file to every user. (I don’t manage every client)
When I set up FreeRADIUS last year with an internal CA, and all BYOD devices, this was an issue on every desktop and mobile OS. I simply instructed the users to click Accept, and if they were truly paranoid, they could stop by and see me to manually verify the certificate. A few did.
If you don’t control the devices and can’t install your CA certificate on them, you don’t really have any other good options.
This work is licensed under a Creative Commons Attribution-ShareAlike 3.0 Unported License.