- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
I agree. Someone dropped the ball or was left off the table and was forgotten.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
The fact is Netgear screwed up big time impacting all Orbi users. When they announce an update, will they tell the users to ignore the security warning when they log into the router for the update? I don't think so.
And when most users start to log into routers & see the warning they weren't told about, Netgear should expect to be contacted by a lot of users on what to do.
This is a mess of epic proportions. Netgear should send email to all Orbi users explaining the issue now & give an estimate on when an update will occur.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
You can certainly let NG know how you feel by submitting a support ticket:
https://www.netgear.com/mynetgear/registration/login.aspx
The issue isn't that major. It only effect how users are getting to the LAN side web page for the RBRs management page. User can certainly talk to NG support and let them know. Otherwise, you'll have to be patient and wait for the next FW update.
Good Luck.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
This is still a problem?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
@Bruin711 wrote:This is still a problem?
It remains a nuisance. People who connect to "http://" from within the Orbi LAN notice nothing. People who connect to the "https://" from outside the LAN get an obnoxious error message about the connection "not being secure", and several browsers actively obstruct the user from connecting to the Orbi web interface. (Have to click on "Advanced" and "Connect anyway".) It's annoying.
Just personally, I believe most of us are really put out with Netgear. "How hard can it be to keep track of when security certificates expire?" is the question. Sort of like,"oh, was I supposed to pay the rent this month?" Well, duh, yes!!!!
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
Ah, yes, sorry. My belief is that "Netgear" does not particpate officially in the community forums. Thus, comments intending to convey information to "Netgear" are futile. There are some moderators with Netgear attached to their names who seem to have a "connection" to Netgear support, and they appear to be well-meaning and helpful. However, I believe that they have no influence. Three weeks ago, when the clamor began, some moderators reported having conveyed the question to "Engineering" (or something). Zero feedback. None. Nada. No explanation. No expected resolution date. I do not think we are being ignored. Far from it. We do not exist.
Sorry, again. It's late. My computer died after a Microsoft update and it took me all day to ressurect it.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
Two months and counting.
Still no fix as of 10/2/2019.
NETGEAR does not appear committed to strong security for their products.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
Have you contacted NG support and files a support ticket?
@BrianG_Simi wrote:Two months and counting.
Still no fix as of 10/2/2019.
NETGEAR does not appear committed to strong security for their products.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
@jameyers4 wrote:I logged into my Orbi RBK50 today - long story short - the security certificate expired yesterday. I have the latest firmware posted (just udpated some days ago) v2.3.5.30.
As old as this is....v2.3.5.30 the common thread...ugh
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
If NETGEAR made it easy (possible?) to create tickets for issues without paying them first, I wouldn't be posting in the forums.
The best I could find was the generic Contact Us page (which I used), but since I do not have paid support and I'm well out of 90 days since my purchase, I'm not able to directly contact Support to get a ticket created.
I'd certainly welcome someone with active support opening a ticket for this issue.
That said, a company like NETGEAR should be aware of how important valid certificates are to overall network security and should not rely on their customers to remind them of basic administrative tasks like certificate management.
I'm going to try signing up and reporting via bugcrowd, but again, I feel like I'm doing a lot of work to bring something to NETGEAR's attention that really shouldn't be their customers' problem.
I suspect they're already aware of the issue at some level in the company and just not prioritizing the fix for whatever internal reasons they might have. I'm just adding my voice here to hopefully bump up the priority.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
You can always reach out to a forum moderator.
@BrianG_Simi wrote:If NETGEAR made it easy (possible?) to create tickets for issues without paying them first, I wouldn't be posting in the forums.
The best I could find was the generic Contact Us page (which I used), but since I do not have paid support and I'm well out of 90 days since my purchase, I'm not able to directly contact Support to get a ticket created.
I'd certainly welcome someone with active support opening a ticket for this issue.
That said, a company like NETGEAR should be aware of how important valid certificates are to overall network security and should not rely on their customers to remind them of basic administrative tasks like certificate management.
I'm going to try signing up and reporting via bugcrowd, but again, I feel like I'm doing a lot of work to bring something to NETGEAR's attention that really shouldn't be their customers' problem.
I suspect they're already aware of the issue at some level in the company and just not prioritizing the fix for whatever internal reasons they might have. I'm just adding my voice here to hopefully bump up the priority.
https://www.netgear.com/about/security/default.aspx
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
This has been going on for over 2 months & Netgear has never acknowledge that this is an issued & will be corrected in the next release. My 90 days has also expired and I'm not going to buy a contract to report something they already know about but refuse to acknowledge.
Consumer Reports recently gave the Orbi a good review. If Netgear won't repond to the little guy maybe they will respond to Consumer Reports.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
Most FW development and such takes more than two months to get developed and fixed. Sometimes 6-9 months depending on severity of bugs that are found. Nothing is fixed over night. I would presume if NG knows about it then they are problaby working on it and eventually will come out in next update. I would be patient until then. The certificate expireation isn't really a show stopper or causing anyone system to stop working.
If your concerned about, please reach out to a forum moderator. There nothing more that can be done here in the forums.
@Wire1852 wrote:This has been going on for over 2 months & Netgear has never acknowledge that this is an issued & will be corrected in the next release. My 90 days has also expired and I'm not going to buy a contract to report something they already know about but refuse to acknowledge.
Consumer Reports recently gave the Orbi a good review. If Netgear won't repond to the little guy maybe they will respond to Consumer Reports.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
Microsoft edge has the same issue.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
How is it you are seeing the error? When you login to your Orbi router via web interface?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
@Retired_Member wrote:How is it you are seeing the error? When you login to your Orbi router via web interface?
Yes when logging into Orbi by web browser (both Chrome or Microsoft edge)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
@Wire1852 wrote:
@Retired_Member wrote:How is it you are seeing the error? When you login to your Orbi router via web interface?
Yes when logging into Orbi by web browser (both Chrome or Microsoft edge)
I just tried mine.....laptop...wifi to Orbi router via Chrome....no error
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
On the LAN side of the Orbi, web pages are HTTP, which is not secured and thus has no certificate.
When the Orbi's Remote Management is activated, the connection is HTTPS to the public IP and the default port is 8443, as in "https//<Orbi Public IP>:8443" (the port can be changed, but I didn't)
My Orbi has Remote Management activated. I used Chrome and got this:
If a person attempts to HTTP to the Orbi public IP, it simply fails. It appears pretty clear that (a) this is not viewed as a "major issue" by Netgear, and (b) they seem to have no easy method of putting a new certificate on the Orbi short of updating the firmware. One of the things people are waiting for is when (if?) new firmware appears, will the certificate be valid?
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
I would add that I assume any network I'm isn't 100% secure, especially with more and more IoT (Internet of Things) devices, like cameras, doorbells, refrigerators, streaming devices, etc. that may or may not be following best security practices, and hackers getting more and more sophisticated.
If I'm logging into to the admin site on my router, I'm going to use https, even when on my LAN, and I expect the products I use to support standard security best-practices, like having valid (non-expired) certs.
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
@BrianG_Simi wrote:If I'm logging into to the admin site on my router, I'm going to use https, even when on my LAN, and I expect the products I use to support standard security best-practices, like having valid (non-expired) certs.
When I log on to my Orbi from the LAN side using HTTPS, I get the same "expired certificate" error as from the public side. Firefox's messsage is more dramatic looking than Chrome, and gives more explanation about when the certificate expired. (Note that when the user proceeds to the web site despite being warned off, the error does not pop up on subsequent visits.)
- Mark as New
- Bookmark
- Subscribe
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Re: Netgear Orbi RBK50 - Web certificate expired yesterday (Aug 2, 2019)
The certificate expiration also breaks Orbi's built-in VPN. When I attempt to VPN into Orbi - from a site external from my home network - I receive warnings in both Chrome and Firefox of potential security issues. Nothing that isn't already know from the security errors thrown by Chrome/Firefox and other browsers but the command "openssl x509 -in server.pem -noout -dates " confirms the certificate has expired:
notBefore=Aug 2 16:21:58 2016 GMT
notAfter=Aug 2 16:51:57 2019 GMT
• What is the difference between WiFi 6 and WiFi 7?
• Yes! WiFi 7 is backwards compatible with other Wifi devices? Learn more