× NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Orbi WiFi 7 RBE973
Reply

Re: Orbi cert error all websites

Ayebeegee
Guide

Orbi cert error all websites

Hi there! I have an Orbi system (router + 2 sats) that has been working well for years. Router FW is V2.7.3.22, and nothing shows as available to upgrade. 

 

Internet connection shows that it is working as well. 

 

An apple tv that is hardwired to the router is working. 

 

All wireless devices are getting cert errors regardless of platform (Win 10 pro, Win 11 pro, macos, ios)

 

"

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: www . routerlogin . net

Issuer:  www . routerlogin . net 

Expires on: Jan 6, 2031

Current date: Feb 18, 2022

"

****Spaces added by me so it didn't show up as HTML

 

I cannot click through this to allow the cert as valid

 

This is an intermittent error that I am seeing across my entire house / various devices. 

 

Some Google-fu show that routerlogin.net is owned by netgear so I'm not sure what I can do.

 

Thoughts? We are still WFH so this is a major impact (tethered to my phone right now). 

 

Thanks!!!

Message 1 of 11
Ayebeegee
Guide

Re: Orbi cert error all websites

Sorry for the double post. Am tethered to my phone and the connection hung when posting. 

Message 2 of 11
CrimpOn
Guru

Re: Orbi cert error all websites

Are Parental Controls or Bitdefender Armor enabled on this router?

Message 3 of 11
Ayebeegee
Guide

Re: Orbi cert error all websites

No they are not. 

 

Thanks!

Message 4 of 11
CrimpOn
Guru

Re: Orbi cert error all websites

This issue has appeared on the forum before, and I cannot remember the resolution. (sigh. age.)

If you don't want to read my rant, please jump to the bottom.

 

Yes, Netgear's SSL certificate situation is a mess.  Many years ago, Netgear managed to register an SSL certificate that covered a bunch of URL's, including routerlogin.com, routerlogin.net, orbilogin.com, orbilogin.net.. (and some more).  In August 2019, that SSL certificate expired and was not renewed.  There has never been an explanation.  Some think that Netgear simply forgot to renew it.  Others think that the certificate authority refused to renew it for some reason. (Perhaps other router manufacturers claimed it was unfair for Netgear to 'own' routerlogin.com. Perhaps they realized that all those 1,000's of web sites claiming to be routerlogin.com are not really Netgear.  Late in 2019 Netgear released new firmware which included a self-signed SSL certifiate.

 

 

The goofy part is that the router never sends the URL routerlogin.com (orbilogin.net, etc.) to a DNS server to be resolved.  (Which IP would a DNS authority say it points to?)  The router intercepts the DNS request and says, "that is ME".  And, the SSL certificate doesn't matter because the router web management is not a secure web site. (It is http, not https)

 

All was good until web browsers decided to prioritize secure web sites over plain web sites.  Chrome, Edge, Firefox, Opera, Safari... all of them decided to first look for a secure web site before looking for what the user typed in.  So, if the user wants to open http://ford.com, the browser first looks for https://ford.com.  If that URL exists, the browser opens it.  If not, then it tries the insecure web site.

 

For some reason, when your devices try to open web sites, there is an error that causes the web browser to be redirected to the Orbi web management system.  The browser tries to open 192.168.1.1 as a secure web site and receives that self-signed SSL certificate.  But browsers do not trust self-signed SSL certificates, so the browser says, "ALERT ALERT UNSAFE GO BACK GO BACK"

 

There is usually a tiny link somewhere on the page that allows the user to tell the browser, "yes, I know it is unsafe, but I want to go there anyway. Just open the web page."  Can you try that and report what comes up?

Message 5 of 11
Ayebeegee
Guide

Re: Orbi cert error all websites

Thank you so much for that comprehensive response. I had seen some snippits of it in google searches about this problem but never in one concise note like that. 

 

When I get that error, I can click advanced and then proceed. However, that shows a curious thing -- I get the URL in question (say, google.com) and a login prompt. 


Now I wish that I had the authority to be an admin for google.com but I don't. So I put in my orbi username/pwd on a lark and it took me to the orbi page rather than the url that it showed it was trying to resolve. 

 

For some reason, some series of reboots / time / it knowing that it was about to be thrown away has caused this to not be an issue currently, but I am worried about it returning and I don't have any idea what I did / didn't do to fix it. 

 

Thanks so much for the suggestion, though. 

 

 

Message 6 of 11
CrimpOn
Guru

Re: Orbi cert error all websites

Was there anything interesting on the Orbi page?

 

(just personally....) I find this situation very confusing for the user.  The web browser appears to be confused and now is trying to load two web pages: (1) the original target URL, and (2) some page on the Orbi administrative web site.  Orbi requires a login for access, so the browser pops that up.  What a mess!

 

We appear to be  no closer to an explanation for how this situation came to exist.  It clearly seems to affect only WiFi client devices.

 

The absolutely, "please don't make me do it", last resort is to do a factory reset on the router.  I hate doing this.

Message 7 of 11
Knight69
Aspirant

Re: Orbi cert error all websites


@Ayebeegee wrote: www.myindigocard.com

Hi there! I have an Orbi system (router + 2 sats) that has been working well for years. Router FW is V2.7.3.22, and nothing shows as available to upgrade. 

 

Internet connection shows that it is working as well. 

 

An apple tv that is hardwired to the router is working. 

 

All wireless devices are getting cert errors regardless of platform (Win 10 pro, Win 11 pro, macos, ios)

 

"

NET::ERR_CERT_COMMON_NAME_INVALID

Subject: www . routerlogin . net

Issuer:  www . routerlogin . net 

Expires on: Jan 6, 2031

Current date: Feb 18, 2022

"

****Spaces added by me so it didn't show up as HTML

 

I cannot click through this to allow the cert as valid

 

This is an intermittent error that I am seeing across my entire house / various devices. 

 

Some Google-fu show that routerlogin.net is owned by netgear so I'm not sure what I can do.

 

Thoughts? We are still WFH so this is a major impact (tethered to my phone right now). 

 

Thanks!!!


There is an error that causes the web browser to be redirected to the Orbi web management system. The browser tries to open 192.168.1.1 as a secure web site and receives that self-signed SSL certificate.

Message 8 of 11
Ayebeegee
Guide

Re: Orbi cert error all websites

Yep, that's exactly what I am seeing. I factory reset everything (man that's a pain) and it seems to have gone away, but this is now the second time it has occurred (and according to what I am reading, it's not isolated to me). 

 

Honestly has me thinking about other options. Not sure what, but now I'm looking....

 

Thank you for the feedback / information. 

Message 9 of 11
buddard
Novice

Re: Orbi cert error all websites

I'm facing a similar problem now: I have an RBR-50 with a single satellite, and all wireless traffic that goes through the satellite will exhibit this problem (expired certificate for routerlogin.net whenever I try to connect to any site using https). When I turn the satellite off and just use the main router everything is working fine, except for the decreased coverage of course.

 

Both the router and satellite are running the latest firmware.

I'm using ethernet backhaul between the router and satellite.

Everything was working fine since I installed the system last year, but this problem started occurring about a month ago.

I've tried resetting the satellite to factory settings, but that didn't improve things.

 

According to Netgear, my support contract has expired, so they won't help me.

 

What's the best alternative to Netgear if i need a cost efficient and reliable mesh network with 2-3 access points?

Message 10 of 11
Mikey94025
Hero

Re: Orbi cert error all websites

Your Orbi is in a strange state if you're seeing this error when visiting all HTTPS websites (i.e., not just routerlogin.com).  First try to restart your entire Orbi system per: https://www.reddit.com/r/orbi/comments/n0r8fl/how_to_properly_resolve_routerloginnet_not/.  If that doesn't work the next resort is to factory reset your Orbi.

Message 11 of 11
Top Contributors
Discussion stats
  • 10 replies
  • 4676 views
  • 7 kudos
  • 5 in conversation
Announcements

Orbi WiFi 7