NVR - SSL Certificate

elf_lord_ZC5

elf_lord_ZC5

Honorary Master
Joined
Jan 3, 2010
Messages
19,868
Reaction score
8,390
Location
Bloemfontein
Many moons ago I setup the NVR at our complex, via the web interface. Added 2 new camera's and want to tweak the settings, names etc.

Now when I attempt to connect to the web interface it gives me ssl error message.

Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.

How do I get this fixed - not sure buying a new NVR will sort this.

Ideas please.
 
Have you tried a different browser? Chrome instead of Edge, or vice versa. Maybe even Internet Explorer seeing it is an older NVR?
 
elf_lord_ZC5 said:
Do these devices, recieve firmware updates?

Will have a look.

Thanks
Click to expand...

They do but usually you have to search for and download them yourself and then upload them through the web interface. I've never seen an NVR that does automatic updates. If it's an old NVR though it's probably long past it's support lifetime. Also check if you can access the NVR via telnet or SSH.
 
geezer said:
Have you tried a different browser? Chrome instead of Edge, or vice versa. Maybe even Internet Explorer seeing it is an older NVR?
Click to expand...

Tried different browsers, don't have a computer with Internet Explorer on, that I am aware of.
 
deweyzeph said:
They do but usually you have to search for and download them yourself and then upload them through the web interface. I've never seen an NVR that does automatic updates. If it's an old NVR though it's probably long past it's support lifetime. Also check if you can access the NVR via telnet or SSH.
Click to expand...


Will try and see what I learn. It is at least 12 years old.

Not thought to try telnet, or ssh.
 
elf_lord_ZC5 said:
Will try and see what I learn. It is at least 12 years old.

Not thought to try telnet, or ssh.
Click to expand...

If you have physical access to the NVR you could always connect a monitor to it via HDMI or VGA and a mouse. Bit of a hack but might be your only option to gain access and change settings.
 
deweyzeph said:
If you have physical access to the NVR you could always connect a monitor to it via HDMI or VGA and a mouse. Bit of a hack but might be your only option to gain access and change settings.
Click to expand...

Access is possible, but a bit of a pain, but hoping to avoid that, and if not, hoping to limit, having to physically access it, to one trip.
 
Rub this from a linux box using the URL of your NVR

/bin/bash based SSL/TLS tester: testssl.sh

TLS/SSL security testing with Open Source Software
testssl.sh testssl.sh

Or if the interface is available to the Internet (I do not hope so!) put the URL in at https://www.hardenize.com/


It is probably using SSL v2 or v3 which isn't supported by modern browsers. You could try get in if you configure an XP VM, use IE 7.0
 
RonSwanson said:
Rub this from a linux box using the URL of your NVR

/bin/bash based SSL/TLS tester: testssl.sh

TLS/SSL security testing with Open Source Software
testssl.sh testssl.sh

Or if the interface is available to the Internet (I do not hope so!) put the URL in at https://www.hardenize.com/


It is probably using SSL v2 or v3 which isn't supported by modern browsers. You could try get in if you configure an XP VM, use IE 7.0
Click to expand...

Not sure how to run your bash script from my RPi

Hardenize says my public IP is not valid.
 
Okay, telnet and ssh, connection refused.

I have found an update "latest" on manufacturers website. Will try installing it. See what that gets me.
 
elf_lord_ZC5 said:
Gives me:

rDNS (192.168.8.40): --
Click to expand...
Looks like it's doing a reverse lookup on the IP, put a FQDN entry in you hosts file and try ./testssl.sh <FQDN>
Remember to include whatever non-standard port number the NVR's webserver is listening on, if it's non standard.
 
So okay, downloaded the update, tried to apply it, "Wrong format"

Also downloaded, all files available for download. Was previously, using, what they called CMS, but the new version, is labled VMS. Installed this, and it had the functionality that was only available previously, on the Web interface. Got both extra camera's installed and working.

Still cannot access the Web interface, but that is moot at this point.

Wondering whether it is worth putting them all on a subnet.
 
You must log in or register to reply here.
Back
Top
Sign up to the MyBroadband newsletter
X