Wired Intelligent Edge

 View Only
  • 1.  Firmware update Issue

    Posted Nov 14, 2019 09:26 AM

    I have a Wireless Edge Service J9051A mounted in a HP Switch 5406zl (J8697A)

    ProCurve 5406zl CS01# sh flash
    Image Size (bytes) Date Version
    ----------------- ------------ -------- --------------
    Primary Image : 15742039 10/28/19 K.16.02.0028
    Secondary Image : 16218624 11/10/14 K.15.15.0009

    Boot ROM Version
    ----------------
    Primary Boot ROM Version : K.15.30

    Default Boot Image : Primary

    ProCurve 5406zl CS01(wireless-services-E) #sh flash
    Image Build Date Install Date Version
    ----- -------------------- -------------------- --------------
    Primary May 30 01:12:16 2009 Nov 05 15:23:48 2009 WT.01.28
    Secondary unknown unknown unknown

    Current Boot : Primary
    Next Boot : Primary
    Software Fallback : Enabled

    When i am trying to update the firmware have this answer:

    upgrade tftp://192.168.0.80/WT_01_39.img


    ProCurve 5406zl CS01(wireless-services-E) #sh upgrade-status detail
    Last Image Upgrade Status : Update error: Failure in openssl. Verification failure. certificate has expired
    Last Image Upgrade Time : Thu Nov 14 10:25:25 2019
    --------------------------------------------------------
    Running from partition /dev/hda5, partition to update is /dev/hda6
    var2 is 5 percent full
    /tmp is 2 percent full
    Free Memory 669560 kB
    FWU invoked via Linux shell
    Reading image file header
    Removing other partition
    Making file system
    Extracting files (this can take some time).
    Verification failure
    30565:error:21075075:lib(33):func(117):reason(117):NA:0:Verify error:certificate has expired
    Are you sure the certificate is valid? The date is Nov 14 10:24:41 2019
    The certificate valid times are: notBefore=Aug 31 22:39:12 2006 GMT notAfter=Aug 28 22:39:12 2016 GMT
    Update error: Failure in openssl. Verification failure. certificate has expired

    Same issue when try a diiferent firmare (WT_01_33.img)

    Does anyone have a solution to this problem?
    Thanks

     

    Note : Admin: P.S:Moved as a new topic from Firmware update Unsuccessful 



  • 2.  RE: Firmware update Issue

    Posted Nov 15, 2019 09:03 AM

    Rough mode...have you tried the same procedure after manually changing (temporarily, eventually disable any NTP timesync reference you had) the switch date back to a date before 28 August 2016 (end date of Certificate validity, as reported)?

    That is to avoid:

    "Are you sure the certificate is valid? The date is Nov 14 10:24:41 2019
    The certificate valid times are: notBefore=Aug 31 22:39:12 2006 GMT notAfter=Aug 28 22:39:12 2016 GMT
    Update error: Failure in openssl. Verification failure. certificate has expired"

    Otherwise first you should understand how to update SSL Certificate installed.



  • 3.  RE: Firmware update Issue

    Posted Nov 15, 2019 10:57 AM

    As advised I changed the system date.

    ProCurve 5406zl CS01(wireless-services-E) #sh upgrade-status detail
    Last Image Upgrade Status : Successful
    Last Image Upgrade Time : Sat Jun 6 16:49:50 2015
    --------------------------------------------------------
    Extracting files (this can take some time).
    Version of firmware update file is WT.01.39
    Creating vmlinux files
    Creating config.kingsnake files
    Creating xlrdiag
    Successful

    ProCurve 5406zl CS01(wireless-services-E) #sh flash

    Image Build Date Install Date Version
    ----- -------------------- -------------------- --------------
    Primary May 30 01:12:16 2009 Nov 05 15:23:48 2009 WT.01.28
    Secondary Feb 04 06:46:03 2011 Jun 06 16:49:50 2015 WT.01.39

    Thank you very much

     



  • 4.  RE: Firmware update Issue

    Posted Nov 15, 2019 11:22 AM
    Glad it worked. Have a nice day.