NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.

Forum Discussion

Mmmmad's avatar
Mmmmad
Tutor
Oct 07, 2020
Solved

Routerlogin.net certificate “not trusted”

In the Orbi app on my iPhone I was viewing a list of all my family's devices connected to our wi-fi. I turned one older device off, sliding the green button to the right in the Orbi app. Then, I chan...
  • CrimpOn's avatar
    Oct 08, 2020

    Questions about the Orbi "app" usually get a more informed response if posted in the forum specifically for the app:

    https://community.netgear.com/t5/Orbi-App/bd-p/en-home-orbi-app 

    It's not that we don't care or want to help.

    The simple fact is that most of the people who participate in this forum use the web interface and have little experience with the "app".

     

    Second, yes, the Orbi SSL certificate cannot be "trusted" because it is self-signed. (not from a "Certificate Authority")

    Over a year ago (August 2019) the certificates that Netgear had registered for a bunch of internet domains (routerlogin.net, orbilogin.com, orbilogin.net, etc.) expired and were not renewed.  As far as I know, there has never been an explanation.  Perhaps Netgear forgot to renew them.  Perhaps the Certifiate Authorities said, "nothing doing".  After all, these certifiates are not protecting a Netgear web server.  They are protecting thousands of web servers owned by thousands of random people.  Anyway, after months of fussing with the problem, Netgear created "self-signed" SSL certificates for orbilogin.com, orbilogin.net, routerlogin.net, etc.

     

    About this time, web browsers became conditioned to avoid "http" web sites and seek out "https" web sites instead.  So, the user types in "http://orbilogin.net" and the browser says, "hmmm.  wonder if there is an httpS://orbilogin.net?  That would be 'secure'.  Look, there IS one.  Oh, rats, it has an SSL certificate that is self-signed and cannot be trusted."

     

    Whew.  Sorry.  Just ignore the message.