Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

8.5.0.3 "Default Web UI Server Certificate" revoked ?

This thread has been viewed 3 times

  • 1.  8.5.0.3 "Default Web UI Server Certificate" revoked ?

    Posted Dec 16, 2019 06:42 PM

    Hi

     

    Just went from version 8.4.0.5 to 8.5.0.3 on my IAP 225. Google Chrome now says the "setmeup" Default Web UI Server Certificate shipped in the firmware is revoked.

     

    The certificate has a start date of:

    Monday, 16 December 2019 at 00:07:35 Central European Standard Time

     

    and an end date of:

    Friday, 14 December 2029 at 00:07:35 Central European Standard Time

     

    I will add own CAs and certs, but still... something has changed regarding behaviour between firmware versions. I have not done any deeper digging yet. But can anyone confirm this? 

     

     

    Tnx in advance

    /Peo

     



  • 2.  RE: 8.5.0.3 "Default Web UI Server Certificate" revoked ?

    Posted Dec 17, 2019 07:38 AM

    I can also see the authority and subject key identifier in the cert is the same, which means it is self signed. The cert subject and issuer are however different. I quess that could be the cause to why Safari says the cert is not compliant. Have not looked at RFC5280. So this is just a guess...



  • 3.  RE: 8.5.0.3 "Default Web UI Server Certificate" revoked ?
    Best Answer

    Posted Dec 20, 2019 03:38 PM

    Today I got a public mail from Aruba with subject...

     

    "Aruba Support Advisory ARUBA-SA-20191219-PLVL08 :: Aruba Instant Certificate Expiry Issue (Rev-1)"

     

    This explains it...