Controllerless Networks

Reply
Highlighted
Occasional Contributor II

Instant 8.3.0 replace certificates

I'm not able to replace the default Captive Portal certificate in an Aruba Instant environment with 2 AP-303's. The certificate worked succesful in my old AP-103 V6 environment.

 

The certificate is imported with the GUI, with an succesfull responce. In the CLI system log an error appears: 

failed to parse cp cert

After the import, the GUI is unavailable. WLAN clients still can connect and SSH is still possible. After a reboot of the AP's the GUI is working again, but the cp certificate is not available anymore:

show cert

Default Server Certificate:
Version       :3
Serial Number :B0:AF:C2:6A:09:93:85:18
Issuer        :/C=US/ST=California/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Subject       :/C=US/ST=California/L=Sunnyvale/O=Aruba Networks/OU=Instant/CN=securelogin.arubanetworks.com
Issued On     :Sep  9 04:58:42 2016 GMT
Expires On    :Sep  8 04:58:42 2020 GMT
Signed Using  :SHA256-RSA
RSA Key size  :2048 bits

Error in reading certificate file:
Error in reading certificate file:
Device Certificate:
Version       :3
Serial Number :1D:06:62:3E:00:02:00:49:43:8A
Issuer        :/UID=com/UID=arubanetworks/UID=devicesign/CN=Aruba Networks Trusted Computing Issuing CA 1
Subject       :/CN=CNFVK9T8H0::38:17:c3:c8:83:a4
Issued On     :Apr 25 16:21:58 2018 GMT
Expires On    :Sep 14 03:21:14 2032 GMT
Signed Using  :SHA256-RSA
RSA Key size  :2048 bits

Also the captive portal is not working anymore. Only way to fix this is a factory reset and a config restore. 

 

Does anybody know how to fix this?

Highlighted
Frequent Contributor I

Re: Instant 8.3.0 replace certificates

Maybe you are running into the same problem as in this topic :

 

https://community.arubanetworks.com/t5/Controllerless-Networks/Problems-replacing-certificate/m-p/466026

 

Double check the procedure of creating the cert file.

 

 

 

Occasional Contributor II

Re: Instant 8.3.0 replace certificates

Hi Toys-toys,


Double checked the procedure. Created a new CSR and certificate. Unfortunately with the same result. 

Highlighted
Occasional Contributor II

Re: Instant 8.3.0 replace certificates

Today tried to replace the certificates in the CLI. No solution.

 

AP-303_Slaapkamer# copy tftp 192.168.10.32 arubainstant_sneppie_nl.pem cpserver cert ******** format pem
/bin/sh: 01: not found

System log:
Oct  3 08:59:55  cli[13678]: <341101> <WARN> |AP AP-303_Slaapkamer@192.168.10.41 cli|  Execute command-copy tftp 192.168.10.32 arubainstant_sneppie_nl.pem cpserver cert ************ format pem.
Oct  3 08:59:57  cli[2686]: <341005> <ERRS> |AP AP-303_Slaapkamer@192.168.10.41 cli|  failed to parse cp cert

 Anybody any idea's?

Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: