Tweet
I'm on Android 13, and when I try to install the wifi certificate, I either get no response, or an error message stating certificate not installed. Anyone else seeing this? Any ideas how to get it to work?
-
-
I heard a discussion about this and I have a guess that the problem is the cert provided is in PEM format while some android want DER format.
If you have a *NIX system or another with "openssl" installed, you could try this:
(As of "now" 13:16 PDT on Aug 9, 2023 , the cert I download with the URL below is PEM format.)
download
https://wifireg.defcon.org/certfigs/...con31-wifi.crt
then run:
openssl x509 -inform pem -in defcon31-wifi.crt -outform der -out defcon31-wifi.der
That will probably work on most BSD (FreeBSD, HardenedBSD, OpenBSD) and most Linux and Mac OS X laptop/desktop.
If using windows, you can try:
certutil -decode defcon31-wifi.crt defcon31-wifi.der
That should convert it from PEM (assuming it is still in PEM) to DER. Then try to install the resulting newly created defcon31-wifi.der
If it works, please follow-up, and maybe NOC team that manages https://wifireg.defcon.org/ can make the cert available in both formats from the https://wifireg.defcon.org/android.html page letting people know to try one and if it fails, try the other.
[Note on security: though I or others could convert these for you, you don't know us, so how can you trust us? Best to install a cert from the authority you trust for the auth/encryption intended, or convert the certs on your own.]
[Feedback on what works can help NOC possibly update their pages: please let us know how it goes.]
[I am not part of the DEF CON 31 NOC Team: I am not writing for them. Nothing I provide is authoritative for DEF CON 31 NOC team.]
[It is possible some may not like PEM or DER, but want it as PFX/PKCS12/P12: but that is a little more complicated process, and there is no point in covering that unless DER does not work if PEM has failed.]
Good luck!Last edited by number6; August 9, 2023, 12:33. -
That doesn't seem to be the issue. It recognizes the .crt file as a certificate, but it won't even let me select the .der file when adding a certificate.Comment
-
It appears the android setup has been updated:
https://wifireg.defcon.org/android.html
refresh page, ignoring cache. It looks like they are providing a cert bundle now with CA and/or IntCA instead.
Does the revised procedure work for you?Comment
-
Install the cert as CA cert, not wifi cert-- also make sure not to put in downloads file-- details in wifireg.defcon.orgComment
Comment