What's new

pixelserv WebGUI Certificate has expired, can't reissue

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Daveo

Regular Contributor
My WebGUI certificate expired on 20/Dec.2022.

I can't get it to reissue.

Going to AMTM, then ps from main menu, then 1, then 1, then a (which is my router's domain), then I get 'Failed to issue a cert to router.asus.com'.

Pixelsrv is running on 192.168.50.2 and was installed thru Diversion.

How do I fix this, as due to no valid/in-date SSL cert in place, I can no longer access router.asus.com >
 
Last edited:
Need help please, as can no longer access the WebGUI due to SSL certificate won't issue/update.

Can't access via http or IP address either.
 
Run these commands and post the output, please.
Bash:
ls -l /tmp/pixelcerts
ps ww | grep pixel
ls -l /opt/var/cache/pixelserv/router.asus.com
echo -n router.asus.com > /tmp/pixelcerts
sleep 2
ls -l /opt/var/cache/pixelserv/router.asus.com
 
ASUSWRT-Merlin RT-AX88U 388.1_0 Sat Dec 3 18:17:22 UTC 2022
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /tmp/pixelcerts
prw------- 1 nobody nobody 0 Dec 26 23:24 /tmp/pixelcerts
dave@RT-AX88U-8B40:/tmp/home/root# ps ww | grep pixel
360718 nobody 8440 S pixelserv-tls 192.168.50.2
369688 dave 5780 S grep pixel
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /opt/var/cache/pixelserv/router.asus.com
ls: /opt/var/cache/pixelserv/router.asus.com: No such file or directory
dave@RT-AX88U-8B40:/tmp/home/root# echo -n router.asus.com > /tmp/pixelcerts
dave@RT-AX88U-8B40:/tmp/home/root# sleep 2
dave@RT-AX88U-8B40:/tmp/home/root# ls -l /opt/var/cache/pixelserv/router.asus.com
ls: /opt/var/cache/pixelserv/router.asus.com: No such file or directory
dave@RT-AX88U-8B40:/tmp/home/root#
 
ASUSWRT-Merlin RT-AX88U 388.1_0 Sat Dec 3 18:17:22 UTC 2022
dave@RT-AX88U-8B40:/tmp/home/root# ls -ltr /opt/var/cache/pixelserv | tail -10
-rw------- 1 nobody root 1679 Dec 26 19:53 ca.key
-rw-rw-rw- 1 nobody root 1147 Dec 26 19:53 ca.crt
-rw-rw-rw- 1 nobody root 2786 Dec 26 23:25 _.telemetry.mozilla.org
 
I tried that and still nothing.

Also tried uninstall and reinstall of Diversion and still no joy.
 
Guess I'm going to have to factory reset the router and setup from scratch (without using pixelserv-tls).
 
Guess I'm going to have to factory reset the router and setup from scratch (without using pixelserv-tls).
Maybe so. Could be some conflict between 388.1 and Pixelserv-tls, but that’s just speculation. No idea why it doesn’t work, but I haven’t used it in a couple years.
 
Is it best not to use pixelserv-tls then ?

Was using it for diversion and for https to work on web gui without using DDNS, as don't want router accessible via the web.
 
Is it best not to use pixelserv-tls then ?

Was using it for diversion and for https to work on web gui without using DDNS, as don't want router accessible via the web.
It’s best not to rely on an abandoned utility. Diversion Lite is perfectly fine for ad-blocking.
 
OK. How to I factory reset router when I can't access web gui ?

Also, how do I install Diversion Lite ?
 
Last edited:
Ypu can search for the WPS button method, or try running this command over ssh:
Code:
service resetdefault_erase
 
OK.

I've managed to do a factory reset and resetup my network.

How do I install Diversion in lite mode ?
 
OK.

Found AMTM initial setup topic, following that to re-setup that side of things.
 
Last edited:
WPS button
 
Router has been fully reset, re-setup a fresh, and scripts installed a fresh.

Diversion now in Lite mode, so no more PixelServ-TLS. I see cert is now self-signed by router and had a 10 year lease.

This full clear out seems to have made things quicker, more responsive, etc.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top