pixelserv WebGUI Certificate has expired, can't reissue

[Daveo]

My WebGUI certificate expired on 20/Dec.2022.

I can't get it to reissue.

Going to AMTM, then ps from main menu, then 1, then 1, then a (which is my router's domain), then I get 'Failed to issue a cert to router.asus.com'.

Pixelsrv is running on 192.168.50.2 and was installed thru Diversion.

How do I fix this, as due to no valid/in-date SSL cert in place, I can no longer access router.asus.com >

 

[Daveo]

Need help please, as can no longer access the WebGUI due to SSL certificate won't issue/update.

Can't access via http or IP address either.

 

[dave14305]

Run these commands and post the output, please.

ls -l /tmp/pixelcerts
ps ww | grep pixel
ls -l /opt/var/cache/pixelserv/router.asus.com
echo -n router.asus.com > /tmp/pixelcerts
sleep 2
ls -l /opt/var/cache/pixelserv/router.asus.com

 

[Daveo]

ASUSWRT-Merlin RT-AX88U 388.1_0 Sat Dec 3 18:17:22 UTC 2022
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /tmp/pixelcerts
prw------- 1 nobody nobody 0 Dec 26 23:24 /tmp/pixelcerts
dave@RT-AX88U-8B40:/tmp/home/root# ps ww | grep pixel
360718 nobody 8440 S pixelserv-tls 192.168.50.2
369688 dave 5780 S grep pixel
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /opt/var/cache/pixelserv/router.asus.com
ls: /opt/var/cache/pixelserv/router.asus.com: No such file or directory
dave@RT-AX88U-8B40:/tmp/home/root# echo -n router.asus.com > /tmp/pixelcerts
dave@RT-AX88U-8B40:/tmp/home/root# sleep 2
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /opt/var/cache/pixelserv/router.asus.com
ls: /opt/var/cache/pixelserv/router.asus.com: No such file or directory
dave@RT-AX88U-8B40:/tmp/home/root#

 

[dave14305]

ls -ltr /opt/var/cache/pixelserv | tail -10

 

[Daveo]

ASUSWRT-Merlin RT-AX88U 388.1_0 Sat Dec 3 18:17:22 UTC 2022
dave@RT-AX88U-8B40:/tmp/home/root# ls -ltr /opt/var/cache/pixelserv | tail -10
-rw------- 1 nobody root 1679 Dec 26 19:53 ca.key
-rw-rw-rw- 1 nobody root 1147 Dec 26 19:53 ca.crt
-rw-rw-rw- 1 nobody root 2786 Dec 26 23:25 _.telemetry.mozilla.org

 

[dave14305]

Did you just reset all your certs?

 

[Daveo]

I tried that and still nothing.

Also tried uninstall and reinstall of Diversion and still no joy.

 

[Daveo]

Guess I'm going to have to factory reset the router and setup from scratch (without using pixelserv-tls).

 

[dave14305]

Guess I'm going to have to factory reset the router and setup from scratch (without using pixelserv-tls).

Maybe so. Could be some conflict between 388.1 and Pixelserv-tls, but that’s just speculation. No idea why it doesn’t work, but I haven’t used it in a couple years.

 

[Daveo]

Is it best not to use pixelserv-tls then ?

Was using it for diversion and for https to work on web gui without using DDNS, as don't want router accessible via the web.

 

[dave14305]

Is it best not to use pixelserv-tls then ?

Was using it for diversion and for https to work on web gui without using DDNS, as don't want router accessible via the web.

It’s best not to rely on an abandoned utility. Diversion Lite is perfectly fine for ad-blocking.

 

[Daveo]

OK. How to I factory reset router when I can't access web gui ?

Also, how do I install Diversion Lite ?

 

[dave14305]

Ypu can search for the WPS button method, or try running this command over ssh:

service resetdefault_erase

 

[Daveo]

OK.

I've managed to do a factory reset and resetup my network.

How do I install Diversion in lite mode ?

 

[dave14305]

How do I install Diversion in lite mode ?

It should ask during installation.

Installation - Diversion

diversion.ch

 

[Daveo]

OK.

Found AMTM initial setup topic, following that to re-setup that side of things.

 

[dave14305]

Just curious which reset method you used?

 

[Daveo]

WPS button

 

[Daveo]

Router has been fully reset, re-setup a fresh, and scripts installed a fresh.

Diversion now in Lite mode, so no more PixelServ-TLS. I see cert is now self-signed by router and had a 10 year lease.

This full clear out seems to have made things quicker, more responsive, etc.