Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

RV180 CSR is changed after reboot

I find that RV180 changes its CSR (cert signing request) after a reboot. This causes my cert to fail to upload.

  1. Power up RV180
  2. Create a CSR
  3. View CSR (copy-n-paste into text file)
  4. Power down RV180
  5. Take CSR to Microsoft CA server to sign. Get cert in return.
  6. Power up RV180
  7. Upload cert. FAILED.
  8. Open CSR in RV180.
  9. Found CSR is different from that in step 3

If I change the workflow, it works:

  1. Power up RV180
  2. Create a CSR
  3. View CSR (copy-n-paste into text file)
  4. Take CSR to Microsoft CA server to sign. Get cert in return.
  5. Upload cert. PASSED.
  6. Open CSR in RV180.
  7. Found CSR is same as that in step 3

 

The only difference in the two workflows is reboot the RV180. All this is happening on firmware 1.0.3.10.

On the out-of-the-box firmware 1.0.0.x, there is no issue.

-----------

CSR before reboot

-----BEGIN CERTIFICATE REQUEST-----
MIHJMHUCAQAwEDEOMAwGA1UEAxMFUlYxODAwXDANBgkqhkiG9w0BAQEFAANLADBI
AkEAz46n5j/6AtcVLzQdqMpf7QnyvdNk2nofmj2CZifRgMO2NMz+PWgZ+otipWmS
Yt+IJTxnB39BwLA01KFiouWwfQIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQAMcPbJ
9CEKKIi8TU1a2GFB4QRoO37b+CE9Z386VbbFDzz+xgATJPP6eYwETvYmRBH1Ffhv
iqyv9JRMqts79l9W
-----END CERTIFICATE REQUEST-----

$ openssl req -text -noout -verify -in a.txt 
verify OK
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: CN=RV180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:cf:8e:a7:e6:3f:fa:02:d7:15:2f:34:1d:a8:ca:
                    5f:ed:09:f2:bd:d3:64:da:7a:1f:9a:3d:82:66:27:
                    d1:80:c3:b6:34:cc:fe:3d:68:19:fa:8b:62:a5:69:
                    92:62:df:88:25:3c:67:07:7f:41:c0:b0:34:d4:a1:
                    62:a2:e5:b0:7d
                Exponent: 65537 (0x10001)
        Attributes:
            a0:00
    Signature Algorithm: md5WithRSAEncryption
        0c:70:f6:c9:f4:21:0a:28:88:bc:4d:4d:5a:d8:61:41:e1:04:
        68:3b:7e:db:f8:21:3d:67:7f:3a:55:b6:c5:0f:3c:fe:c6:00:
        13:24:f3:fa:79:8c:04:4e:f6:26:44:11:f5:15:f8:6f:8a:ac:
        af:f4:94:4c:aa:db:3b:f6:5f:56

-----------

CSR after reboot

-----BEGIN CERTIFICATE REQUEST-----
MIHJMHUCAQAwEDEOMAwGA1UEAxMFUlYxODAwXDANBgkqhkiG9w0BAQEFAANLADBI
AkEAuVXZl+Y+eE7xQKoq9Zn2t+InYE+GCdbESZN2/tqSjY1s+dQ5cEnRKmVdN96Z
HOle0h8+MnT/kXqKn4KpzxZe0QIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQAMCjHx
SwP6MG3x4ri/Ips69ZvHL/EGGozH0kw0FkTRvx5ZKK4DWhbFDC/DmVYXN4CR+m10
oHOZm2jfFRShD+OE

$ openssl req -text -noout -verify -in b.txt 
verify OK
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: CN=RV180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:b9:55:d9:97:e6:3e:78:4e:f1:40:aa:2a:f5:99:
                    f6:b7:e2:27:60:4f:86:09:d6:c4:49:93:76:fe:da:
                    92:8d:8d:6c:f9:d4:39:70:49:d1:2a:65:5d:37:de:
                    99:1c:e9:5e:d2:1f:3e:32:74:ff:91:7a:8a:9f:82:
                    a9:cf:16:5e:d1
                Exponent: 65537 (0x10001)
        Attributes:
            a0:00
    Signature Algorithm: md5WithRSAEncryption
        0c:0a:31:f1:4b:03:fa:30:6d:f1:e2:b8:bf:22:9b:3a:f5:9b:
        c7:2f:f1:06:1a:8c:c7:d2:4c:34:16:44:d1:bf:1e:59:28:ae:
        03:5a:16:c5:0c:2f:c3:99:56:17:37:80:91:fa:6d:74:a0:73:
        99:9b:68:df:15:14:a1:0f:e3:84

 

Everyone's tags (2)
45
Views
0
Helpful
0
Replies
CreatePlease login to create content