enterprise wifi auth and 47-day TLS certs (lemmy.world)

submitted 5 months ago* (last edited 5 months ago) by kimchi@lemmy.world to c/networking@sh.itjust.works

3 comments fedilink hide all child comments

Has anybody heard if the upcoming 47-day maximum on TLS cert lifetime will apply to Enterprise wifi auth using private PKI (especally on IOS and Android)?

We have a campus CA that signs the TLS cert used by RADIUS when students connect to wifi using personal devices. Freshman need to accept the cert once (hopefully after checking the fingerprint), then usually one more time before graduation. Every 47 days would be difficult.

you are viewing a single comment's thread
view the rest of the comments

[-] UID_Zero@infosec.pub 2 points 5 months ago

I'm pretty sure certificates signed by internal CAs are exempt. I would have to go find the documentation but I believe that was called out.

this post was submitted on 21 May 2025

5 points (100.0% liked)

networking

3238 readers

1 users here now

Community for discussing enterprise networks and the ensuing chaos that comes after inheriting or building one.

founded 2 years ago

MODERATORS

manifex@sh.itjust.works