0

I have ubuntu 14 server that runs apache and has huawei router. Recently I purchased and installed a SSL certificate for my domain (say www.abc.com) according to guide here.

Then I tested my ssl cert using their tool. and it gives an error as common name not matched. Tool say common name as cpe.huawei.com

So I also checked using command openssl s_client -connect www.abc.com:443 And It shows Secure Renegotiation not support. And server certificate retrieve here when I decoded using a tool show common name as cpe.huawei.com.

So I know some another certificate run or cached on the server. But I search every general directory and couldn't find another cert. Also, my apache error log file has no error log regarding this issue.

I need help in overriding new cert over all other certs and remove any cached ssl cert on my server.

Thanks.

  • You need to give us more details about your environment. – Sven May 11 '17 at 5:00
  • Edited my quection – Mahinda May 11 '17 at 5:27
2

"CPE" is a telco abbreviation for "Customer Premise Equipment", i.e. anything that they control but that they put on the customer site. In this case, it's going to refer to your router (it also commonly used for an ONT).

Your huawei router is intercepting requests directed to your public IP address on port 443. My guess is that if you were to browse to https://[your public ip] from outside your network, you will get a certificate error. Click through the certificate error and you'll either see the login page for your router, or some huawei API endpoint.

Your correct course of action here is to contact your ISP or huawei's support channel and get their assistance in resolving this, as they are hijacking port 443 on your connection.

  • You were right it was ISP problem. Thanks. – Mahinda Mar 9 at 9:20

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.