I'm attempting to get certificate authentication working. I've tested it out on the Windows Client and the iOS Junos Pulse mobile so I know that the signin, realm, and auth servers are correct. On my android device I can't seem to get the cert format correct. First off, why doesnt adroid pulse client support pfx/p12? That is the easiest most common format for an exported keypair and certificate. Even better, why isn't the certificate interface integrated into the Android certfificate store? Your duiplicating work and making it more difficult to deploy.
So far I have exported my pfx file with the command line
openssl pkcs12 -in cred.p12 -out certkey.pem -nodes -clcerts
I've then setup the option to use certs in three different ways with the Junos Client
1)Point the client to certkey.pem for both dialog choices
2)Split certkey.pem into a cert.pem and key.pem. In the pulse client I configured the certs as apropriate.
2)Split certkey.pem into a cert.pem and key.pem. I then edited the .pem files and removed all headers leaving the begin cert and end cert header. In the pulse client I configured the certs as apropriate.
3)I took the cert.pem and key.pem and removed all headers leaving only the ciphertext. I renamed those files cert.der and key.der respectivly. In the pulse client I configured the certs as apropriate.
In all cases I get the error "Failed to connect to the server! Check your Certificate." I have a trace running on the realm the client points to for the UPN the cert uses. In all cases I never see a login attempt. I have client cert logging on and the user log shows no attempt. That tells me that the client isn't digesting the cert or even trying to login. So where am I messing up?
