amtm pixelserv-tls CA for WebUI failed multiple times

[Skeptical.me]

I receive the error message:

Failed to issue a cert to router.asus.com.
You may re-run this script to try again or contact me for assistance.

I'm not sure what the next steps are.

 

[dave14305]

There are some ideas in this thread.

pixelserv - WebGUI Certificate has expired, can't reissue

My WebGUI certificate expired on 20/Dec.2022. I can't get it to reissue. Going to AMTM, then ps from main menu, then 1, then 1, then a (which is my router's domain), then I get 'Failed to issue a cert to router.asus.com'. Pixelsrv is running on 192.168.50.2 and was installed thru Diversion...

www.snbforums.com

 

[Skeptical.me]

There are some ideas in this thread.

pixelserv - WebGUI Certificate has expired, can't reissue

My WebGUI certificate expired on 20/Dec.2022. I can't get it to reissue. Going to AMTM, then ps from main menu, then 1, then 1, then a (which is my router's domain), then I get 'Failed to issue a cert to router.asus.com'. Pixelsrv is running on 192.168.50.2 and was installed thru Diversion...

www.snbforums.com

Thanks for that.

 

[Skeptical.me]

There are some ideas in this thread.

pixelserv - WebGUI Certificate has expired, can't reissue

My WebGUI certificate expired on 20/Dec.2022. I can't get it to reissue. Going to AMTM, then ps from main menu, then 1, then 1, then a (which is my router's domain), then I get 'Failed to issue a cert to router.asus.com'. Pixelsrv is running on 192.168.50.2 and was installed thru Diversion...

www.snbforums.com

For the life of me I can't remember how to add the cert to my devices, is it just a matter of going to the LAN IP of diversion?

 

[dave14305]

For the life of me I can't remember how to add the cert to my devices, is it just a matter of going to the LAN IP of diversion?

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

 

[Skeptical.me]

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

Thank you very much!

 

[Skeptical.me]

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

Interesting. Amtm says it issued the .crt but when I go to router.asus.com, or 192.168.50.2 (diversions IP) I can't access the page.

 

[Skeptical.me]

admin@RT-AX88U-E390:/tmp/home/root# ls -l /tmp/pixelcerts

prw-------    1 nobody   nobody           0 Jan  5 02:28 /tmp/pixelcerts





admin@RT-AX88U-E390:/tmp/home/root# ps ww | grep pixel

 7606 nobody   10780 S    pixelserv-tls 192.168.50.2

24908 admin  5780 S    grep pixel



admin@RT-AX88U-E390:/tmp/home/root# ls -l /opt/var/cache/pixelserv/route

r.asus.com

-rw-rw-rw-    1 nobody   root          2766 Jan  4 19:28 /opt/var/cache/pixelserv/router.asus.com

 

[dave14305]

Interesting. Amtm says it issued the .crt but when I go to router.asus.com, or 192.168.50.2 (diversions IP) I can't access the page.

Are you using http://192.168.50.2/ca.crt

 

[Skeptical.me]

Are you using http://192.168.50.2/ca.crt

I rebooted the router and was able to import the crt, thanks!

 

[weech]

i know this is a bit of an old thread, but i discovered that i was having the same error showing up in the ax88u log, when the router rebooted. i read through everything here and on the provided links. this led me to look at amtm, and it told me that diversion was out of date. when i ran the update, along with making the version current it also resolved the pixelserv-tls error entry in the log.
this is an informative thread. thanks!