ip touch 4038 - problem with certificate download

User avatar
cavagnaro
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 7001
Joined: 14 Sep 2005 19:45
Location: Brasil, Porto Alegre
Contact:

Re: ip touch 4038 - problem with certificate download

Post by cavagnaro » 03 Nov 2014 09:32

Yeah but a certificate can have many encryption methods. What if he created a one in wrong format?
Ignorance is not the problem, the problem is the one who doesn't want to learn

OTUC/ICS ACFE/ACSE R3.0/4.0/5.0/6.0
Certified Genesys CIV 8.5
Certified Genesys Troubleshooting 8.5
Certified Genesys BEP 8.x
Genesys Developer

User avatar
tot3nkopf
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 4023
Joined: 02 Feb 2006 10:41
Location: Germany & Romania
Contact:

Re: ip touch 4038 - problem with certificate download

Post by tot3nkopf » 03 Nov 2014 09:40

cavagnaro wrote:Yeah but a certificate can have many encryption methods. What if he created a one in wrong format?
That would be a problem when activating the certificate in my view, not when downloading...

User avatar
cavagnaro
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 7001
Joined: 14 Sep 2005 19:45
Location: Brasil, Porto Alegre
Contact:

Re: ip touch 4038 - problem with certificate download

Post by cavagnaro » 03 Nov 2014 09:44

The error says Bad File Content so for me can be that he downloaded the certificate but is not able to understand/open it...Wireshark on pc port maybe?
Ignorance is not the problem, the problem is the one who doesn't want to learn

OTUC/ICS ACFE/ACSE R3.0/4.0/5.0/6.0
Certified Genesys CIV 8.5
Certified Genesys Troubleshooting 8.5
Certified Genesys BEP 8.x
Genesys Developer

User avatar
tot3nkopf
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 4023
Joined: 02 Feb 2006 10:41
Location: Germany & Romania
Contact:

Re: ip touch 4038 - problem with certificate download

Post by tot3nkopf » 03 Nov 2014 09:45

marc_bo wrote:I tried but no changes...

The thing is, when i start the download manually it works!
Were you able also to activate the downloaded certificate or just download it manually?

marc_bo
Member
Posts: 5
Joined: 31 Oct 2014 05:36
Location: Germany - Freiburg

Re: ip touch 4038 - problem with certificate download

Post by marc_bo » 04 Nov 2014 02:47

When I start the download manually, i can use/activate the certificate. --> 802.1x Auth. is succesfull.

But what is the right encryption method for the certificate?

When the certificate will downloaded automatically, who I have to activate it? When the ip phone boots up?

I understand that the certificate can be downladed automatically:
Image
You do not have the required permissions to view the files attached to this post.

User avatar
tot3nkopf
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 4023
Joined: 02 Feb 2006 10:41
Location: Germany & Romania
Contact:

Re: ip touch 4038 - problem with certificate download

Post by tot3nkopf » 04 Nov 2014 02:51

It is not clear --> it is mentioned that the download can be automated, however no mention about automatic activation of the certificate...

krzysioD
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 1157
Joined: 30 Aug 2006 13:43
Location: Europe, Poland

Re: ip touch 4038 - problem with certificate download

Post by krzysioD » 19 Nov 2014 05:00

Stuck on very same think.
Any luck there?
Please note that at no time I will provide you with OXE/4400 nor AOS releases.
Note that it's our private time, that we spent to help you, so please don't expect complete solution for your problem.
You will need to do homework by your self.

User avatar
tot3nkopf
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 4023
Joined: 02 Feb 2006 10:41
Location: Germany & Romania
Contact:

Re: ip touch 4038 - problem with certificate download

Post by tot3nkopf » 19 Nov 2014 06:48

krzysioD wrote:Stuck on very same think.
Any luck there?
I did not test this yet (busy with other stuff). The method to upload the certificate by url is considered anyway highly unsecured in our environment...
In which part are you stuck Krzysztof? Automatic activation?

krzysioD
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 1157
Joined: 30 Aug 2006 13:43
Location: Europe, Poland

Re: ip touch 4038 - problem with certificate download

Post by krzysioD » 24 Nov 2014 07:36

Yeap.
or to go to some simple solution: may i turn off the 802.1X globally on all of ip phones NOT by going into every iptouch menu?
Please note that at no time I will provide you with OXE/4400 nor AOS releases.
Note that it's our private time, that we spent to help you, so please don't expect complete solution for your problem.
You will need to do homework by your self.

User avatar
cavagnaro
Alcatel Unleashed Certified Guru
Alcatel Unleashed Certified Guru
Posts: 7001
Joined: 14 Sep 2005 19:45
Location: Brasil, Porto Alegre
Contact:

Re: ip touch 4038 - problem with certificate download

Post by cavagnaro » 24 Nov 2014 09:12

For Activation you should modify URL path with the url where the certificate (pkcs12) is. Generated by your CA if using Win2008 or superior. Alcatel embeded certs are only 2003 compliant.
The activation (query) then will happen as proper of the 802.1x protocol.

For global maybe do it via telnet on the iptouch?
Ignorance is not the problem, the problem is the one who doesn't want to learn

OTUC/ICS ACFE/ACSE R3.0/4.0/5.0/6.0
Certified Genesys CIV 8.5
Certified Genesys Troubleshooting 8.5
Certified Genesys BEP 8.x
Genesys Developer

Post Reply

Return to “Security and Access Control”