MSM765 Firmware version: 6.6.9.0-23567 - Certificate expiry issue

[tybor86]

Hi everyone i have this old MSM765 Controller with Firmware version: 6.6.9.0-23567 and constant : webs: SSL Error occurred while reading: error:14094416:SSL routines:ssl3_read_bytes:sslv3 alert certificate unknown (336151574).  My certs are expired any ideas where can i get new ones ? Cuz now my controller can't even talk to my Access Points.

[Davit2005]

What do the license's show?

 

These things are real old now, to put into perspective my previous employer put the same solution in before I started there in 2012.  

[psydii]

Hmm. Your Root CA certificate used to securely issue/validate certificates for the AP management API expired. Poking around the HP / Aruba forums (and an old edugeek thread here), these certificates are generally updated by HP, with the last one being issued in 2020,  which was generous as it was some years after the MSM went end of life/end of support.  The "Dummy" certificate apparently shouldn't matter, it's just aesthetics  (apparently).

 

You might try throwing yourself at the mercy of HP/Aruba support, to see if there is anyone left there who can generate a suitable replacement certificate for you, but given the initial certificate was generated over 20 years ago - this platform might just have finally run out of road and come to a permanent hard stop.

The other way (maybe/maybe a terrible idea - I wouldn't want to try it) could be to somehow  generate and install a new root and issue new certs from that for the SOAP XML services to all the aps - I suspect this is undocumented, and might potentially end you up in a worse place.

Edited August 21, 2025 by psydii