What's new
  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

[RT-AC68U] - Certificate issue - New modem, now all traffic over Router has SSL issues

Tidsee

New Around Here
I recently purchased and installed a new modem, an Arris SB6183-RB. I went through the install with my provider and got everything enabled and set to go while I was on a direct ethernet connection. The ethernet connection still works fine.

My issue is once I send traffic over my wireless router, an ASUS RT-AC68U that I have had for two years and always worked great. Something is causing major security conflicts. Perhaps the firewall somehow? Basically, any device over the wireless network receives certificate security errors and websites cannot load. I have attached outlook.com screenshots as an example. I have two computers, and a smart phone, and any websites over the network now have problems. There are a few sites where certificates seem to work, and some apps on my phone seem to work fine. But the majority of websites:

1.) I get an alert from ESET antivirus about the faulty certificate.
2.) If I ignore that, Firefox is usually next on my tail.
3.) If I add an exception on Firefox and ignore, then it goes through OpenDNS and I am blocked on that end.

Basically, any traffic over my router is now hit with tons of warnings. I have tried the following:

1.) Updated the Firmware on the router, took a few flashes to get up to the most current Merlin version 380.62, did not help.

2.) I tried modifying a few settings in the router firmware that were recommended after updating to the latest Merlin, but these are more speed adjustments. Did not help.

3.) I went into the GUI for the Arris modem, which is pretty basic and limited. There are some errors and that on the System Log, but I don't know enough to decipher them. I did notice that the system time for the modem is 1 hour behind my actual time (Central US), and I know that certificate errors can happen because of time issues. The example outlook.com cert is a 5 day cert, and falls within the correct time.

4.) Verified that my system time is correct through the BIOS.


I did tons and tons of googling, but no one has had my specific issue. I am at a loss. Perhaps it's something as simple as a firewall setting on the Router, I do not know. But my internet network is currently unusable. I have to be tethered via ethernet just to make this post, as this site is of course blocked over the wireless network.

Any help? Thank you in advance.


Provider: Charter
Type: Cable
Windows 10 64 bit
ESET NOD32 is my antivirus
 

Attachments

  • outlook cert.JPG
    outlook cert.JPG
    39.1 KB · Views: 471
  • outlook cert details time ok, today 26th.JPG
    outlook cert details time ok, today 26th.JPG
    48.1 KB · Views: 394
  • ipconfig all.txt
    ipconfig all.txt
    3.4 KB · Views: 519
  • Xirrus copy paste.JPG
    Xirrus copy paste.JPG
    66.5 KB · Views: 690
I recently purchased and installed a new modem, an Arris SB6183-RB. I went through the install with my provider and got everything enabled and set to go while I was on a direct ethernet connection. The ethernet connection still works fine.

My issue is once I send traffic over my wireless router, an ASUS RT-AC68U that I have had for two years and always worked great. Something is causing major security conflicts. Perhaps the firewall somehow? Basically, any device over the wireless network receives certificate security errors and websites cannot load. I have attached outlook.com screenshots as an example. I have two computers, and a smart phone, and any websites over the network now have problems. There are a few sites where certificates seem to work, and some apps on my phone seem to work fine. But the majority of websites:

1.) I get an alert from ESET antivirus about the faulty certificate.
2.) If I ignore that, Firefox is usually next on my tail.
3.) If I add an exception on Firefox and ignore, then it goes through OpenDNS and I am blocked on that end.

Basically, any traffic over my router is now hit with tons of warnings. I have tried the following:

1.) Updated the Firmware on the router, took a few flashes to get up to the most current Merlin version 380.62, did not help.

2.) I tried modifying a few settings in the router firmware that were recommended after updating to the latest Merlin, but these are more speed adjustments. Did not help.

3.) I went into the GUI for the Arris modem, which is pretty basic and limited. There are some errors and that on the System Log, but I don't know enough to decipher them. I did notice that the system time for the modem is 1 hour behind my actual time (Central US), and I know that certificate errors can happen because of time issues. The example outlook.com cert is a 5 day cert, and falls within the correct time.

4.) Verified that my system time is correct through the BIOS.


I did tons and tons of googling, but no one has had my specific issue. I am at a loss. Perhaps it's something as simple as a firewall setting on the Router, I do not know. But my internet network is currently unusable. I have to be tethered via ethernet just to make this post, as this site is of course blocked over the wireless network.

Any help? Thank you in advance.


Provider: Charter
Type: Cable
Windows 10 64 bit
ESET NOD32 is my antivirus
You should check the DNS server settings, I think they are wrong. Based on the certificate, it looks like you have this set up.
 
You should check the DNS server settings, I think they are wrong. Based on the certificate, it looks like you have this set up.

Thank you. I should have realized sooner that OpenDNS itself was the culprit. I went into my router's settings and eliminated the custom DNS that routes through OpenDNS and just left it as my regular ISP, and suddenly everything was working again. Today, I re-plugged in the OpenDNS into the router settings and it actually seems to be working fine as well. For the future, you are correct, the issue was related to OpenDNS's umbrella deal and the lack of a proper certificate. Solving it is supposed to require a special certificate download. See articles below, not the link at the top of the first link. Adding exceptions is a losing battle, see second article from Oct 2016:

https://support.opendns.com/hc/en-u...ndns-com-Certificate-errors-Adding-Exceptions

https://support.opendns.com/hc/en-us/articles/227987007
 

Latest threads

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Back
Top