FWA510 custom HTTPS certificate

oldium

Hi, I have not found a way to import a custom HTTPS certificate into Zyxel FWA510 firmware V1.70(ACGD.0)C0. There is a ZYXELcert one, but I have a Lets Encrypt one matching my domain and I would like to use it. After import in Security/Certificates/Local Certificate the imported certificate shows Validity From/To as 0001-01-01T00:00:00Z and in the detail view there is only the certificate, not a private key. Am I doing something wrong? Or is a custom HTTPS certificate not supported (which is REALLY insecure)?

Zyxel_Judy

Hi @oldium ,

To better assist you, we'd like to try importing the exact same certificate on one of our own FWA510 units. Could you send us the certificate file(s) you used for the import — including the private key via private message (click my account > Message)?

If you'd rather not share the live certificate for this domain, a fresh Let's Encrypt certificate issued the same way (same tool, same import steps) for a throwaway/test subdomain would also work for reproduction — whichever is easier on your end.

PeterUK

Yes I too could not get that to work on my FWA510 and gave up, its so simple on USG and switches to do but I just can't work out how to do it for the FWA510.

If it is a bug that it never did work then due to the shorting of certificate being valid needs to have the same method as FLEXH H has with DNS-01 (Cloudflare) would be nice

Zyxel_Judy

Hi @oldium , @PeterUK ,

Thank you for your patience while we looked into this.

The certificate import function under Security > Certificates > Local Certificates on the FWA510 is currently intended for the TR-069 client only (TR-069 client is a built-in feature that allows your service provider’s management system to remotely configure, update firmware, and troubleshoot the device).

As a result, this function cannot currently be used with a custom certificate such as one issued by Let’s Encrypt.