topic Re: HTTP and HTTPS not working in Wireless

HTTP and HTTPS not working

Turki.A.Baqatada — Fri, 10 Jul 2026 11:25:46 GMT

Actually i am working on 8510 WLC and suddenly I can't access the WLC via https nor http even though are enabled

I checked the certificate validity of webadmin it shows that expired 2024 but WLC time is 2022 amd actually also new access points not joining

Re: HTTP and HTTPS not working

Mark Elsen — Fri, 10 Jul 2026 11:29:15 GMT

- @Turki.A.Baqatada Post the full boot process of an access point that fails to join, if this happened
suddenly then try a reboot of the controller.

Re: HTTP and HTTPS not working

aleabrahao — Fri, 10 Jul 2026 11:29:18 GMT

If the Web Admin certificate is actually expired, recreate it.

config certificate generate webadmin

Re: HTTP and HTTPS not working

aleabrahao — Fri, 10 Jul 2026 11:32:14 GMT

Oh, and also correct the date and time of your WLC.

Re: HTTP and HTTPS not working

aleabrahao — Fri, 10 Jul 2026 11:36:12 GMT

@Turki.A.BaqatadaJust a heads-up, are you aware that this controller model is no longer supported? You should consider migrating to a C9800.

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Fri, 10 Jul 2026 11:38:37 GMT

Yes I know and we are going to move soon

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Fri, 10 Jul 2026 11:41:37 GMT

Actually now I want to resolve web access first that will helps me alot

My question that if the validity of web admin certificate expired on 2024 and I configured the time to be on 2022 which right now configured will bypass this issue or not and if not what could be the solution

Re: HTTP and HTTPS not working

aleabrahao — Fri, 10 Jul 2026 11:47:18 GMT

@Turki.A.Baqatada Try regenerating the certificate as I suggested.

Re: HTTP and HTTPS not working

Mark Elsen — Fri, 10 Jul 2026 11:47:40 GMT

@Turki.A.Baqatada >....Actually now I want to resolve web access first that will helps me a lot
What error do you get in a browser when trying to use the GUI ?

Re: HTTP and HTTPS not working

aleabrahao — Fri, 10 Jul 2026 11:58:28 GMT

@Turki.A.Baqatada A very important detail I forgot to mention, when generating a new certificate, it is necessary to restart the WLC.

Re: HTTP and HTTPS not working

Rich R — Sat, 11 Jul 2026 09:25:03 GMT

@Turki.A.Baqatada Have you rebooted the WLC for a start?

You should be using the final release of code 8.5.182.12.

> new access points not joining
Read through all the relevant Field Notices in my signature below - make sure you follow all the steps required to resolve them (disable NTP and set time back is only 1 step of many).
What model are the new APs?

Collect the complete console log from an affected AP from power on, save to a text file (.txt) and attach here for us to see what the AP reports.
What do these commands on WLC CLI (no GUI needed) show?
show ap join stats summary all
show ap join stats summary <ap-mac>

Re: HTTP and HTTPS not working

hellencharless54 — Sat, 11 Jul 2026 12:24:59 GMT

The expired Web Admin certificate is very likely related to both issues.

If the WLC clock is showing 2022 while the webadmin certificate expired in 2024, the controller may be using an invalid time, which can cause certificate validation problems. Modern browsers may refuse the HTTPS connection because of the certificate status, and an incorrect system time can also affect CAPWAP DTLS certificate validation, preventing new APs from joining.

A few things to check:

Verify the WLC date, time, and NTP configuration.
Check whether the MIC/SSC certificates used for AP authentication are still valid (show certificate all).
Try accessing the GUI with another browser or in a private/incognito window to rule out cached certificate issues.
Confirm whether SSH or the CLI is still accessible. If it is, you can inspect the webadmin certificate and regenerate it if necessary.
Check the AP join failure reason with commands such as show ap join stats summary all or show ap join stats detailed <AP_Name>, and review the controller logs for certificate or DTLS errors.

Could you also share:

The WLC software version (8.x release)?
The output of show certificate all
The output of show time
Any messages from debug capwap events enable or the AP join logs?

Those details will help determine whether the issue is only the web GUI certificate or whether expired AP/DTLS certificates are also preventing new APs from joining.

Re: HTTP and HTTPS not working

aleabrahao — Sat, 11 Jul 2026 12:28:09 GMT

Is this generated by AI?

Re: HTTP and HTTPS not working

Rich R — Sat, 11 Jul 2026 14:20:14 GMT

That was my first thought too @aleabrahao
@hellencharless54 seems oblivious to the field notices and the need to turn the clock back (with NTP off) to match old certs.
> Check whether the MIC/SSC certificates used for AP authentication are still valid (show certificate all).
Well they're almost certainly expired by now for older Aironet APs - that's the whole point of the field notices @hellencharless54

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Sat, 11 Jul 2026 14:42:21 GMT

How can i know mic /ssc certificates i show certificate all

For web admin it is expired since 2023 but i configured the wlc time to 2022 as i faced this issue before with only joining aps not accessing the wlc via browser i did this and was succeeded with disabling ntp but now i can not login also found some access points or new one not joining too

Regarding join state i found error is join message decode maximum message size failed

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Sat, 11 Jul 2026 15:15:35 GMT

Verify the WLC date, time, and NTP configuration. Time is 11 jul 2022
Check whether the MIC/SSC certificates used for AP authentication are still valid (show certificate all). How do I check I typed show certificate all is there any thing here i can focus
Try accessing the GUI with another browser or in a private/incognito window to rule out cached certificate issues. I tried with no luck
Confirm whether SSH or the CLI is still accessible. If it is, you can inspect the webadmin certificate and regenerate it if necessary. SSH WORKING AND WEB ADMIN VALID TILL 2023 IF NEEDS TO REGENERATE HOW I DO THIS AND IS THERE ANY IMPACT
Check the AP join failure reason with commands such as show ap join stats summary all or show ap join stats detailed <AP_Name>, and review the controller logs for certificate or DTLS errors. JOIN MESSAGE DECODE MAXIMUM MESSAGE SIZE FAILED

Could you also share:

The WLC software version (8.x release)?8.0.152.0
The output of show certificate all
The output of show time
TIME............…............ Mon jul 11 18:19:53 2022
Any messages from debug capwap events enable or the AP join logs
FOR CISCO SHA1 DEVICE CERT EXPIRE ON 2023 SO BASED ON CONTROLLER TIME STILL VALID
COULD BE CERTIFICATE OF AP IT SELF?

Re: HTTP and HTTPS not working

Rich R — Sat, 11 Jul 2026 18:21:53 GMT

@Turki.A.Baqatada please read my previous reply (above) and provide the requested information?

The other reply you are reacting to (which looks to be AI generated) is of limited use - has some valid points and some not.

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Mon, 13 Jul 2026 07:19:37 GMT

@Rich R actually let my explain you the full picture here

first of all we are installing 9800 as a demo and for testing we installed AIR-CAP3702I-E-K9 airos APs to check if it is going to join and joined successfully but now due no license we want to return thes APs to join our old 8510 WLC version 8.0.152

What model are the new APs?

AIR-CAP3702I-E-K9

show ap join stats summary <ap-mac>-

Reason for last unsuccessful join attempt................ Join message decode Maximum message size Failed

_____________________________________________________

Second issue that we are facing and tried alot of things which is i can't access gui

I tried many browsers old and new version but no luck
I tried loging via service port same issue
I tried http and https as both enabled also didn't work

show time

Time............................................. Tue Jul 12 11:47:15 2022

web admin certificate

Start : 2014 Apr 23rd

End : 2024 Apr 23rd

for AP logs

access point in remote site and can not provide now

Re: HTTP and HTTPS not working

Mark Elsen — Mon, 13 Jul 2026 08:08:44 GMT

- @Turki.A.Baqatada You can deploy and use the 9800-CL (virtual) controller without any licensing
complaints for up to 50 access points.

>....Join message decode Maximum message size Failed
You will get into compatibility problems if you let the access points use a
9800 controller and try to go back to an aireos controller with a too old
version

+ What error do you get in a browser when trying to use the GUI ?

Re: HTTP and HTTPS not working

Turki.A.Baqatada — Mon, 13 Jul 2026 09:10:33 GMT

What error do you get in a browser when trying to use the GUI ?

Secure connection failed

so you this message Join message decode Maximum message size Failed means that it is comatibility issues du joined to 9800 ? if so what can we do to resolve this issue and let them join 8510 WLC ? do i have to hard reset APs