topic Re: HTTPS Problem with wlc 5520 in Wireless

HTTPS Problem with wlc 5520

Vahid Tavajjohi — Mon, 05 Jul 2021 13:52:26 GMT

i have 2 wlc that are configured in HA. after HA setup, HTTPS is not working and only HTTP is working correctly.

i've done these things:

1- regenerate Certificate

2- Disabling and Enabling HTTPS

3- Upgrade software to 8.2 last released

but problem still remains.

Regards

Re: HTTPS Problem with wlc 5520

Adam-Kanarkiewicz — Tue, 29 Aug 2017 10:34:51 GMT

I have the same situation with 5520 in HA mode. Any solution for that?

Re: HTTPS Problem with wlc 5520

Prateek Saxena — Thu, 31 Aug 2017 04:00:04 GMT

Can you share the output of "show certificate summary"and "show certificate webadmin"

Re: HTTPS Problem with wlc 5520

Adam-Kanarkiewicz — Mon, 04 Sep 2017 08:16:34 GMT

Hello,

To make it work I have changed the cipher to RC4 executing following command

config network secureweb cipher-option rc4-preference enable

It would be great to not use RC4 because of company security policies. If you have any ideas please let me know. Below outputs which you requested for.

(WLC) >show certificate summary
Web Administration Certificate................... 3rd Party
Web Authentication Certificate................... Locally Generated
Certificate compatibility mode:.................. off
Lifetime Check Ignore for MIC ................... Disable
Lifetime Check Ignore for SSC ................... Disable

(WLC) >show certificate webadmin
Show Web Admin!

WebAdmin Device Certificate details:

Subject Name :
C=US, O=Cisco Systems Inc., OU=DeviceSSL (WebAdmin), CN=169.254.1.1
Issuer Name :
C=US, O=Cisco Systems Inc., OU=DeviceSSL (WebAdmin), CN=169.254.1.1
Serial Number :
8E393F17
Validity :
Start : Aug 23 00:00:01 2017 GMT
End : Aug 23 00:00:01 2027 GMT
Signature Algorithm :
sha256WithRSAEncryption
Hash key :
SHA1 Fingerprint : 20:b9:b0:31:bb:a4:08:86:9c:65:e7:17:69:58:db:ae:f9:22:9f:88
MD5 Fingerprint : 2b:6c:63:85:62:ef:9b:b9:a2:af:cc:35:40:56:da:89

Re: HTTPS Problem with wlc 5520

Prateek Saxena — Mon, 04 Sep 2017 08:19:55 GMT

Hi Adam,

You do not see anything on the browser (with rc4 disabled) or you get a certificate warning?

Re: HTTPS Problem with wlc 5520

Adam-Kanarkiewicz — Mon, 04 Sep 2017 10:48:02 GMT

Hello,

I revoked the changes applied to reproduce the issue and I have noticed that with settings which were used before, it started working:

(WLC) >show network summary
DNS Server IP...............................
Web Mode.................................... Disable
Secure Web Mode............................. Enable
Secure Web Mode Cipher-Option High.......... Disable
Secure Web Mode Cipher-Option SSLv2......... Enable
Secure Web Mode RC4 Cipher Preference....... Disable
Secure Web Mode SSL Protocol................ Disable

I don't know what was changed and why it didn't work before. It seems that it works fine now.