Take the 2-minute tour ×
Android Enthusiasts Stack Exchange is a question and answer site for enthusiasts and power users of the Android operating system. It's 100% free, no registration required.

I want to connect to my University's wireless using my Nexus One. When I go to "Add Wi-Fi network" in Wireless Settings I fill in the Network SSID and select 802.1x Enterprise for the security and fill everything out.

The problem is that our university's wireless uses Thawte Premium Server CA certificate for certification.

When I click the drop down list for CA certificate I get nothing in the list (just N/A)

Now I have the certificate (Thawte Premium Server CA.pem) and have moved it to my SD card, but it doesn't look like Android automatically detects it.

Where should I put the certificate so that the Android wireless manager recognizes it. In other words, how can I import a CA certificate so that Android recognizes that it is on the phone and displays it in the CA Certificate drop down list.

Thanks for any help,

Tomek

P.S. My phone is not rooted

EDIT: After doing some research it looks like you are able to install certificates by going to your phone's settings > Location & Security > Install from SD card

Unfortunately it looks like the only accepted file extension is .p12. It does not look like there is a way to import .cer or .pem files (which are the only two files that come with the Thawte certificates) at this moment.

It does look like you can use a converter to convert your .cer or .pem files to .p12, however a key file is needed.

https://www.sslshopper.com/ssl-converter.html

I do not know where to get this key file for the Thawte certificates.

share|improve this question

migrated from superuser.com Dec 26 '10 at 0:51

This question came from our site for computer enthusiasts and power users.

    
I wish this would be unclosed. It has been most helpful to me. Thank you to everyone on this page. –  Ricket Jun 16 '10 at 15:40
    
a .crt certificate also works fine –  Lie Ryan Jul 12 '11 at 10:34

5 Answers 5

I've used RealmB's Android Certificate Installer to great success. You simply upload your PEM encoded (.cer or .pem) file and then point your phone's browser to the link that is provided. No need for a private key.

share|improve this answer
    
That site itself tells if the upload is a valid certificate or not. It gave me invalid certificate error. I uploaded the one with right file permissions on my linux machine and it worked great. –  so_mv Mar 7 '13 at 0:49
    
The possible security implications of that site should be pointed out along with the link (or, cite that website itself: How is the security? - Bad, you should only upload files that you feel can be publicly viewed without any side effects.). –  O. R. Mapper Dec 20 '13 at 13:16

http://abtevrythng.blogspot.com/2010/06/adding-cer-certificates-on-your-android.html

Shows how to actually achieve this. Worked fine for me. Try it out.

In this article .cer to .pfx (which is what you need on Android) conversion is given. Simple method is given using which you can convert .cer to .pfx and use it to connect to the Wi-Fi network. Plus you don't need any Key to convert .cer to .pfx!!!

share|improve this answer

For other people looking for this answer who can't use realmB's solution because they can't access the internet on their phone...I just changed the file extension of my certificates from .cer to .crt and everything worked fine! Thanks to the users of this forum for the lead on the solution.

share|improve this answer

First: Android only understands binary format of CA and only with file format *.crt.
Second: Android only understands user certificates in *.p12 file format.

So You can check whether your CA file binary or text very simple: open it with any text editors^

If there something like 0‚ i0‚ Т , then it is binary.

If you see something like

Certificate: Data: Version: 3 (0x2) Serial Number: 96:0e:45:58:68:9a:bf:00 Signature Algorithm: sha1WithRSAEncryption Issuer: C=UA, ST=

Then it is text. It is very simple to convert it to binary by yourself in *nix:

openssl x509 -inform PEM -outform DER -in CA.pem -out CA.crt

Or just ask your system administrator.

Copy both CA.crt and usercert.p12 to your SD card or send it by email (if you have an email client configured on Android, usually downloaded attachments are stored in Download folder, actually it does not matter).

Go to Security and find option something like this: install certificate from your SD card

First install CA.crt, then usercert.p12

Go to wifi and make new connection, choose 802.1x EAP whatever and select your certificates for CA CA.crt and for user certificate usercert.p12 in my case I entered username as well.

share|improve this answer
    
To whoever this might help in the future: I had no problem installing a text format certificate on an SGS4 - but only after I had moved it to the Downloads folder (My Documents wouldn't do) and also only with the option indicated in the question, not by opening the CRT file from a file manager, where Android claimed the file type was unknown (unlike on Nexus 7, where it did work like that). –  O. R. Mapper Dec 20 '13 at 13:13

You can access your cer/pem from SD card with correct MIME type to be installed using TJWS (Android edition), so you do not need to upload your certificate to some web site.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.