Skip to content

Guest Portal: Issues with intermediate certificate

Alexander Wolf edited this page Mar 4, 2023 · 1 revision

Some devices might stumble over a "non-complete" certificate chain when accessing the guest portal.

A full chain looks like server cert -> intermediate cert -> root cert, where the root certificate is trusted by the browsers / devices.

UI, in their infinite wisdom, have chosen to provide us two options:

  1. install a (proper) full certificate chain, and no devices complain - but this will break the WiFiman application or
  2. install just a server certificate, making WiFiman happy, but some devices will complain.

Now you can pick your poison by choosing to set the flag CAPTIVE_FULLCHAIN in ubios-cert.env. Setting it to YES means no complaints, but no WiFiman, NO is the other way around.