Wireless Access

Hello,

does anybody know how to delete CSR from CLI . The problem is I want to upload my ssl in binary DER format, but earlier I generated CSR in WebGUI that won`t be used, and now system is reporting :Error Uploading Certificate: Cert public key did not match the private key in the CSR store

Please try this on the commandline:

restore factory_default certificate

It shows me this:

Unable to verify factory default certificate.

not able to use "restore factory_default certificate" is a bug

- Please try, if you can revert to the "default" cert

I am not sure if I am understanding your question.

- Can you please try : creating Trustedcert/ServerCert combination and apply them to captive portal/dot1x/webUI profiles

  and then should be able to delete the old csr.

I want to use external SSL certificate which was bought from verified reseller and avoid that users have to accept some self-signed certificate in their web browsers

No problem to upload TrustedCA

Rrobertos,

Please open a support case.  That commandline command is the only think we know of that would clear the CSR.  It looks like you cannot upload the SSL cert unless it corresponds to that CSR or clear it.

if you have an SSL cert provided by an cert authroity. Assuming that CSR was generated outside of the controller , all you need to do is to merge the certificate file (.crt) with the private key using a text editor. The order should be

crt followed by private key

-----BEGIN CERTIFICATE-----

** Certificate content ****

-----END CERTIFICATE----------BEGIN RSA PRIVATE KEY-----

** Private key content

-----END RSA PRIVATE KEY-----

Once you save this merged content as .crt file you can upload it to with PEM certificate type and passphrase. The controller will accept the certificate even though it has own CSR. This option can be used to copy to multiple controllers.

I did the command and it stated it was successful and i did write mem and when to webui and csr was still there so i tried reboot and it is still there how can we fix this mismatch error if we cannot get rid of the existing csr?

Was there ever a solution to this?  I've run into the same problem.  I generated a certificate CSR just to go through the paces for training purposes and now there is an outstanding CSR on the device.  I don't need to restore to the factory cert; the factory cert is what is in place and is working.  I need to cancel or remove the CSR.