RV320 - SSL Certificate Issue / Admin lock-out - additional info

[juergenbaumann]

Hi

Having this issue since a few days after activating a self signed SSL certificate.

I did follow the instructions on the published posts. The issue with the certificate does not disappear.

Upload via TFTP on a Mac OS the latest available firmware and upload was confirmed as successfully (by the tftp). The router seems to do something, reboots, but login is still not possible. Safari blocks in general, Firefox allows to go on, but reports a 'bad gateway 502' error.

How do I know that the upload and re-install of the firmware was successful? is there any way to check the current version via terminal?

Could there be other steps to be made, to get rid of the certificate?

Thanks in advance for your help

[balaji.bandi]

how about SSH to device ? is that works. ?

[juergenbaumann]

Hi
I am not familiar with ssh - any suggestion what syntax to be used?

[balaji.bandi]

guide help you :

https://www.cisco.com/c/dam/en/us/td/docs/routers/csbr/rv320/CLI_guide/rv32x_cli_guide.pdf

[juergenbaumann]

Thanks
Gave it a quick try, access was refused.
I suspect that remote ssh is not turned on, I feel I never touched that parameter during setup.
But anyway that was me trying to fire up ssh.

ssh 192.168.1.1 -l cisco
ssh: connect to host 192.168.1.1 port 22: Connection refused

Was the syntax wrong?

[balaji.bandi]

192.168.1.1 is the correct  Ip and you able to ping ?

[juergenbaumann]

Yes, Yes .
The router does work as such - I simply cannot access it via web and reconfigure because of the issue with the certificate.

[balaji.bandi]

This is a known issue in these models. Could you let me know what version of firmware is running?

I will try different browsers like Palemoon (rather famous browsers Chrome and Edge) to see if that ignores the cert issue.

If not, I will do a factory reset and test it again. (if that access, then immediately upgrade to the latest firmware).

other option i can think of change the system date to old date and see if that works.

when you get access GUI extend the cert :

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb4381-configure-my-certificate-on-rv320-and-rv325-vpn-routers.html

https://www.cisco.com/c/en/us/support/docs/smb/routers/cisco-rv-series-small-business-routers/smb4409-generate-certificates-on-rv320-and-rv325-vpn-routers.html