topic Re: R310 Certificate Problem in Unleashed

R310 Certificate Problem

kieran — Sun, 23 Apr 2023 23:15:39 GMT

I recently installed a new certificate on my R310, and since installing the certificate I can no longer access the admin UI on the device. I’ve tried factory resetting the AP as it hasn’t cleared it. Does anyone know of a way of restoring the self signed certificate?

Thanks!

Re: R310 Certificate Problem

BobaEnjoyer — Sun, 23 Apr 2023 23:34:35 GMT

Oh yikes. Can you SSH to the R310? Maybe there's a command to re-generate the original self-signed Ruckus certificate. I'm surprised a factory reset didn't also reset the cert.

Re: R310 Certificate Problem

kieran — Sun, 23 Apr 2023 23:46:22 GMT

I can ssh into it, I’ve had a look this afternoon to see if there is anything which I can’t find. The closet I got was enabling anon-ftp and ftp (but the admin username and password didn’t work), while searching the anon-ftp there is a folder with the certificates in but as it’s read only I cant upload the replacements 😕

Re: R310 Certificate Problem

sanjay_kumar — Mon, 24 Apr 2023 07:42:45 GMT

Hi,

Can you SSH into the AP and enter the command "set http enable" and then try to access the TO from http instead of https?
If yes, then please contact the support so that we can restore the certificate on the AP.

Re: R310 Certificate Problem

kieran — Mon, 24 Apr 2023 08:02:58 GMT

I've tried that, the commands run ok but no difference if I browse to the unleashed admin portal.

I've also tried opening a ticket but the device appears as 'asset does not exist'. Which I think is because I got the AP free from the rukcus give away.

Re: R310 Certificate Problem

sanjay_kumar — Mon, 24 Apr 2023 08:47:58 GMT

Hi,

Try below steps:
set https disable
set http enable

And then access the AP from the IP address http://ipaddress

Re: R310 Certificate Problem

kieran — Mon, 24 Apr 2023 09:08:35 GMT

Thanks, but still trys to redirect to the https version of the site 😞

Re: R310 Certificate Problem

BobaEnjoyer — Mon, 24 Apr 2023 09:28:17 GMT

I'm still new to the CLI, but I just found:

no web-portal-force-https-redirection
Disables web portal force HTTPS redirection.

It's under "config" in the beginning, right after you "enable"

So:

1. SSH in. Log in as your admin account.
2. enable
3. config
4. no web-portal-force-https-redirection
5. exit

(exit saves changes in that menu. abort or quit will cancel changes and go back to the previous menu.)

Maybe this will work.

Re: R310 Certificate Problem

kieran — Mon, 24 Apr 2023 09:58:07 GMT

Sends me back to https site still 😞

It shocks me that there is no way to reset the SSL certs via CLI as most other equipment I've used allows you to do it

Re: R310 Certificate Problem

sanjay_kumar — Mon, 24 Apr 2023 10:02:09 GMT

Hi,

Can you try converting the AP to Standalone version from CLI upgrade and then see if it helps?
https://support.ruckuswireless.com/articles/000001551

Re: R310 Certificate Problem

kieran — Mon, 24 Apr 2023 18:27:15 GMT

So to fix it incase anyone else has the problem.

1) Reflash the standalone AP firmware via ssh

2) Factory reset the unit to get the default login

3) Upload the unleashed firmware via the web ui

4) Hey Presto! The default certificate is restored

Thank you for all your help.

Re: R310 Certificate Problem

sanjay_kumar — Tue, 25 Apr 2023 02:49:15 GMT

Hi @kieran

Glad to share that the issue is resolved.

Re: R310 Certificate Problem

BobaEnjoyer — Wed, 26 Apr 2023 07:03:34 GMT

Great that the workaround worked! This still feels like buggy behavior. A factory reset in Unleashed should also reset the Web UI certificate back to the original self-signed, Ruckus CA and remove any user-added CAs or certificates.

@sanjay_kumarwill this be fixed?

Re: R310 Certificate Problem

sanjay_kumar — Mon, 01 May 2023 02:38:00 GMT

Hi @BobaEnjoyer

The cert restore option available only from the GUI for now as CLI option has been removed.

The other option is to set the factory. When the AP is set to factory reset, the AP will try to search for Master (if any already preset) and then becomes Master. Doing this it will restore to default.
However, if the AP had lost the certificate then it cannot restore to default.

Since the standalone upgrade worked, we are not sure on the AP condition when in Unleashed. We could have checked the AP cert condition from the shell mode if it had the support.
My only guess is AP had lost the cert during the new cert upload or due to some other process.