HTTPS error

[A.Timoshenko]

Hi, when i try loggin by HTTPS on a router i have next errors.

%HTTPS: http ssl get context fail (-41104)

HTTP: ssl get context failed (-40407)

I have a 2821 router with

c2800nm-advipservicesk9-mz.124-15.T1.bin ios

Can anybody help me?

[garytayl]

Try the following:

Router(config)#crypto key zeroize rsa

Router(config)#crypto key generate rsa

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys ...[OK]

[A.Timoshenko]

it isn't help

[garytayl]

If you have ip http secure-client-auth in your config, try removing it and then https again.

[A.Timoshenko]

it doesn't work too

[johnlloyd_13]

try to add these on your router:

Router(config)#username privilege 15 password <0 or 7>

Router(config)#ip http authentication local

Router(config)#line vty 0 4

Router(config-line)#login local

Router(config-line)#transport input ssh

privilege 15 allows you to configure your router. also, check if you IOS supports crypto functionality

[johnlloyd_13]

i forgot to add this:

Router(config)#ip http secure-server

this command enables https access on the router

[A.Timoshenko]

ssh 1.5 work correct.

of course i know about "ip http secure-server" command.

[eng.malak]

i know this is very old topic but any lick to solve it ?

[locbus123]

hi,

the solution is easy and gave it above:

Router(config)#crypto key zeroize rsa

Router(config)#crypto key generate rsa

How many bits in the modulus [512]: 1024

% Generating 1024 bit RSA keys ...[OK]

you have to generate key but 1024 not 512 this one is to SSH1.5.... i checked it a few minutes ago

[matthias.motte]

Hi,

I have this problem too.

To fix it I do the folowing :

(conf)#crypto key zeroize rsa

(conf)#ip http secure-server

Try again my connexion to ssl server and ... it's work like a charm ;)

After I create a new rsa key (1024)

(conf)#crypto key generate rsa modul 1024

Try ssh and https, work together now ;)