cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1090
Views
0
Helpful
1
Replies

SSL cert issue on DDNS requests with HTTPS method

Mauro Crociara
Level 1
Level 1

Hello,

Recently I tried to setup the DDNS with ovh.com using the HTTPS method. During the process i get the current error:

*Mar 17 10:57:18.570: HTTPDNSUPD: Call returned Request Aborted, update of sun.homenetwork <=> 79.42.60.68 failed
*Mar 17 10:57:18.570: DYNDNSUPD: Another update completed (outstanding=0, total=0)
*Mar 17 10:57:18.570: HTTPDNSUPD: Clearing all session 47 info
*Mar 17 10:58:19.494: DYNDNSUPD: Adding DNS mapping for sun.homenetwork <=> 79.42.60.68
*Mar 17 10:58:19.494: HTTPDNS: Update add called for sun.homenetwork <=> 79.42.60.68
*Mar 17 10:58:19.494: HTTPDNSUPD: Session ID = 0x30
*Mar 17 10:58:19.494: HTTPDNSUPD: URL = 'https://username:password@213.186.33.34/nic/update?system=dyndns&hostname=host'
*Mar 17 10:58:19.494: HTTPDNSUPD: Sending request
*Mar 17 10:58:19.554: opssl_SetPKIInfo entry
*Mar 17 10:58:19.554: CRYPTO_PKI: (A035C) Session started - identity selected (Trustpool)x
*Mar 17 10:58:19.554: CRYPTO_OPSSL: Can't find router cert.
*Mar 17 10:58:19.554: CRYPTO_PKI: unlocked trustpoint Trustpool, refcount is 0
*Mar 17 10:58:19.554: >>> SSL 3.0 Handshake [length 0035], ClientHello
*Mar 17 10:58:19.554:     01 00 00 31 03 00 56 EA 8D CB 3F 2B C4 6A B6 00
*Mar 17 10:58:19.554:     87 88 05 75 68 7E 0E 49 DD 26 FD 1C 9A 88 C5 51
*Mar 17 10:58:19.554:     BB 65 EC A9 95 BA 00 00 0A 00 04 00 0A 00 05 00
*Mar 17 10:58:19.554:     09 00 FF 01 00
*Mar 17 10:58:19.554:
*Mar 17 10:58:19.622: HTTPDNSUPD: Call returned Request Aborted, update of sun.homenetwork <=> 79.42.60.68 failed
*Mar 17 10:58:19.622: DYNDNSUPD: Another update completed (outstanding=0, total=0)

From logs looks like there's a problem with the SSL cert. I tried following this documentation without success. I tried to import the ovh.com cert in base64 as you see in the attachment and mentioned in the doc. How I can import my certificates on Cisco 1941? To retrieve this one I just clicked on the lock icon in the browser, but probably is not the right method. The documentation talks about a "chain" with a root cert, intermediate cert and so on, but this is not my field and I have now clue about it.

Thanks for the support

Mauro

1 Reply 1

Philip D'Ath
VIP Alumni
VIP Alumni

I think that is going to be hard to resolve.  I would try and easy provider like:

http://www.noip.com/