Delete SSL certificates

[Leonardo Fiori]

I made a mess with my Asus RT-AX88U, and i need to remove all the SSL certificates that i have generated with let's encrypt. How can i do this? Is there an SSH command?

 

[martinr]

You might find an answer in here:

https://www.snbforums.com/threads/r...te-issued-to-lan-ip-thanks-to-stuff-up.45291/

I ran a quick search on the forum. If not, you could try a deeper search.

And if you do end up carrying out a factory reset - sounds a bit drastic, but if you’re looking for an excuse, this could be it - then do carefully /meticulously follow L&LD’s guide:

https://www.snbforums.com/threads/n...l-and-manual-configuration.27115/#post-205573

 

[MDM]

Try: Administration - System - Format JFFS partition at next boot ?

 

[Leonardo Fiori]

Factory reset just worked quite well. Its just a paint in the ###.
However i am still having troubles generating the certificate. And i see a lot of other people is having too.. think i am giving up.

 

[martinr]

Factory reset just worked quite well. Its just a paint in the ###.
However i am still having troubles generating the certificate. And i see a lot of other people is having too.. think i am giving up.

So the original problem of not being able to save the authorised key via the gui had been fixed by the factory reset but you now have a problem generating “the certificate”? Correct?

Can you detail what you are doing and where it’s going wrong? And also which certificate are you trying to generate? And a link to the thread where others are having the same problem would be a bonus, too.

Factory reset is a little time consuming if done properly, but it does have benefits other than a sound, uncorrupted router: you get to refresh your memory on what’s on each page of the webui and see what’s changed since you last looked!

 

[Leonardo Fiori]

So the original problem of not being able to save the authorised key via the gui had been fixed by the factory reset but you now have a problem generating “the certificate”? Correct?

Can you detail what you are doing and where it’s going wrong? And also which certificate are you trying to generate? And a link to the thread where others are having the same problem would be a bonus, too.

Factory reset is a little time consuming if done properly, but it does have benefits other than a sound, uncorrupted router: you get to refresh your memory on what’s on each page of the webui and see what’s changed since you last looked!

Yes, the problem has been solved by a factory reset

I am trying to generate a certificate with let's encrypt. It just does not work. I even used external ip detection, but it don't work.

In the DDNS page it notifies me that:

"The wireless router currently uses a private WAN IP address.
This router may be in the multiple-NAT environment. While using an External check might allow DDNS to reflect the correct IP address, this might still interfere with remote access services."

And it's true. My provider uses an antenna that has a router built in. That router gives me an ip address to wich my asus router connects.

Let's encrypt is stuck at "authentifying..." or something similar, and it tries to resolve my internal ip address (the one that my router gives me)

However if i do a lookup with the official asus tool (http://iplookup.asus.com/nslookup.php) the DDNS (without certificate) points to my actual external ip.

 

[martinr]

Yes, the problem has been solved by a factory reset

I am trying to generate a certificate with let's encrypt. It just does not work. I even used external ip detection, but it don't work.

In the DDNS page it notifies me that:



And it's true. My provider uses an antenna that has a router built in. That router gives me an ip address to wich my asus router connects.

Let's encrypt is stuck at "authentifying..." or something similar, and it tries to resolve my internal ip address (the one that my router gives me)

However if i do a lookup with the official asus tool (http://iplookup.asus.com/nslookup.php) the DDNS (without certificate) points to my actual external ip.

Ok. I thought it might be the Let’s Encrypt cert, about which I have no experience, but that sounds like the symptom. As to the cause, your your detailed explanation should prove helpful to those with experience of fixing double-NAT and related problems.