cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
326
Views
0
Helpful
0
Replies

RV180 CSR is changed after reboot

ivan98zzz
Level 1
Level 1

I find that RV180 changes its CSR (cert signing request) after a reboot. This causes my cert to fail to upload.

  1. Power up RV180
  2. Create a CSR
  3. View CSR (copy-n-paste into text file)
  4. Power down RV180
  5. Take CSR to Microsoft CA server to sign. Get cert in return.
  6. Power up RV180
  7. Upload cert. FAILED.
  8. Open CSR in RV180.
  9. Found CSR is different from that in step 3

If I change the workflow, it works:

  1. Power up RV180
  2. Create a CSR
  3. View CSR (copy-n-paste into text file)
  4. Take CSR to Microsoft CA server to sign. Get cert in return.
  5. Upload cert. PASSED.
  6. Open CSR in RV180.
  7. Found CSR is same as that in step 3

 

The only difference in the two workflows is reboot the RV180. All this is happening on firmware 1.0.3.10.

On the out-of-the-box firmware 1.0.0.x, there is no issue.

-----------

CSR before reboot

-----BEGIN CERTIFICATE REQUEST-----
MIHJMHUCAQAwEDEOMAwGA1UEAxMFUlYxODAwXDANBgkqhkiG9w0BAQEFAANLADBI
AkEAz46n5j/6AtcVLzQdqMpf7QnyvdNk2nofmj2CZifRgMO2NMz+PWgZ+otipWmS
Yt+IJTxnB39BwLA01KFiouWwfQIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQAMcPbJ
9CEKKIi8TU1a2GFB4QRoO37b+CE9Z386VbbFDzz+xgATJPP6eYwETvYmRBH1Ffhv
iqyv9JRMqts79l9W
-----END CERTIFICATE REQUEST-----

$ openssl req -text -noout -verify -in a.txt 
verify OK
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: CN=RV180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:cf:8e:a7:e6:3f:fa:02:d7:15:2f:34:1d:a8:ca:
                    5f:ed:09:f2:bd:d3:64:da:7a:1f:9a:3d:82:66:27:
                    d1:80:c3:b6:34:cc:fe:3d:68:19:fa:8b:62:a5:69:
                    92:62:df:88:25:3c:67:07:7f:41:c0:b0:34:d4:a1:
                    62:a2:e5:b0:7d
                Exponent: 65537 (0x10001)
        Attributes:
            a0:00
    Signature Algorithm: md5WithRSAEncryption
        0c:70:f6:c9:f4:21:0a:28:88:bc:4d:4d:5a:d8:61:41:e1:04:
        68:3b:7e:db:f8:21:3d:67:7f:3a:55:b6:c5:0f:3c:fe:c6:00:
        13:24:f3:fa:79:8c:04:4e:f6:26:44:11:f5:15:f8:6f:8a:ac:
        af:f4:94:4c:aa:db:3b:f6:5f:56

-----------

CSR after reboot

-----BEGIN CERTIFICATE REQUEST-----
MIHJMHUCAQAwEDEOMAwGA1UEAxMFUlYxODAwXDANBgkqhkiG9w0BAQEFAANLADBI
AkEAuVXZl+Y+eE7xQKoq9Zn2t+InYE+GCdbESZN2/tqSjY1s+dQ5cEnRKmVdN96Z
HOle0h8+MnT/kXqKn4KpzxZe0QIDAQABoAAwDQYJKoZIhvcNAQEEBQADQQAMCjHx
SwP6MG3x4ri/Ips69ZvHL/EGGozH0kw0FkTRvx5ZKK4DWhbFDC/DmVYXN4CR+m10
oHOZm2jfFRShD+OE

$ openssl req -text -noout -verify -in b.txt 
verify OK
Certificate Request:
    Data:
        Version: 0 (0x0)
        Subject: CN=RV180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (512 bit)
                Modulus (512 bit):
                    00:b9:55:d9:97:e6:3e:78:4e:f1:40:aa:2a:f5:99:
                    f6:b7:e2:27:60:4f:86:09:d6:c4:49:93:76:fe:da:
                    92:8d:8d:6c:f9:d4:39:70:49:d1:2a:65:5d:37:de:
                    99:1c:e9:5e:d2:1f:3e:32:74:ff:91:7a:8a:9f:82:
                    a9:cf:16:5e:d1
                Exponent: 65537 (0x10001)
        Attributes:
            a0:00
    Signature Algorithm: md5WithRSAEncryption
        0c:0a:31:f1:4b:03:fa:30:6d:f1:e2:b8:bf:22:9b:3a:f5:9b:
        c7:2f:f1:06:1a:8c:c7:d2:4c:34:16:44:d1:bf:1e:59:28:ae:
        03:5a:16:c5:0c:2f:c3:99:56:17:37:80:91:fa:6d:74:a0:73:
        99:9b:68:df:15:14:a1:0f:e3:84

 

0 Replies 0
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: