Wireless Access

last person joined: yesterday 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Back to discussions
Expand all | Collapse all

Default TLS certificate issue after switching AOS versions

This thread has been viewed 1 times

  • 1.  Default TLS certificate issue after switching AOS versions

    Posted Dec 05, 2017 08:31 AM

    Hello everyone,

     

    after searching the forums several times without finding something regarding my problem, I guess I need to start a new topic for this:

     

    After switching back and forth between different AOS versions (8.1, 8.0, 6.5 and 6.4) on my lab controllers, I am unable to connect to them using https or ssh after boot. The browser is not showing any certificate for the controllers ip address.

    After issuing the command "restore factory_default certificate" https and ssh work again, as long as the controllers are powered on. After next restart I need to execute the command over serial again in order to get https and ssh access to the controllers.

    The last thing I tried in order to solve the problem was wiping the flash without any success.

     

    I appreciate any help with the issue

     

    Martin



  • 2.  RE: Default TLS certificate issue after switching AOS versions

    EMPLOYEE
    Posted Dec 05, 2017 08:41 AM
    We need a screenshot of the errors you are seeing.


  • 3.  RE: Default TLS certificate issue after switching AOS versions
    Best Answer

    Posted Dec 05, 2017 10:26 AM

    I feel sorry, as I need to correct myself. I don't know why I was thinking that, but ssh is working in fact. Same with https. It is just not working with Firefox and Edge, but with Chrome. The error message is something like "Can’t connect securely to this page" in all of the browsers, with the exception that Chrome lets me accept that. It seems related to the revocation of the GeoTrust certificate.

    What irritates me is, as soon as I execute the restore default certificates command Firefox will let me connect until restart.

    But this is clearly an browser/certificate related problem and not AOS related. Shame on me.