DrayTek UK Users' Community Forum

Help, Advice and Solutions from DrayTek Users

VIGOR 2950 SSL Key Size - SSL Certificate Import

  • raidvii
  • Topic Author
  • Offline
  • New Member
  • New Member
More
02 Oct 2011 03:00 #69557 by raidvii
Hi,

Has anyone tried to import a Trusted Authority SSL Certificate for example a Comodo Cert?

I have a client who would like to utilise with SSL RDP + VPN

Myself utilise this feature but have never bothered to purchase a Trusted Authority Cert, only created self-assigned, since it is only myself accessing the network.

I've attempted to generate a Cert request, but the Vigors seem to only allow 1024 bit certificates to be imported "CSR

There is an option under certificate management to change the key size but it is greyed out.

Majority of SSL Vendors now only supply and support 2048 bit Certificates, since it is known 1024 bit is no longer considered adequate security.

I've attempted to locate a SSL provider that still can deliver 1024 bit without much luck.

Is there a way to change the Key size from 1024 to 2048? A telnet command perhaps?

if not, why do Draytek have the option (which is greyed out) available in the first place? When likely would Draytek update firmware allowing this change as they seem to be a couple years behind the times.

Would anyone know (apart from self generated certificates) a vendor that still can deliver a 1024 bit certificate?

Any advice would be helpful.

Regards,

Raidvii ..

Please Log in or Create an account to join the conversation.

More
03 Oct 2011 11:04 #69567 by voodle
Try the 3.3.0 firmware if you're not using that already and see if it allows you to change it from 1024 to 2048?

I know the 3200 can do 2048bit certs and that's not a VigorPro router so I think the 2950 should be allowed to do that if the option is added

Please Log in or Create an account to join the conversation.

  • raidvii
  • Topic Author
  • Offline
  • New Member
  • New Member
More
03 Oct 2011 11:23 #69568 by raidvii
Hi Voodle,

Yep firmware is 3.3.0.

I have not seen a 3200 yet. The stack of 3300's I have can generate a Certificate request at 2048, some are a few years old. But of course no SSL for the 3300.

Nope. The 2950 is stuck at RC4 1024bit.

I can't find anything that is bluntly obvious in the GUI and thinking it may be command based.

Please any takers?

Raidvii.

Please Log in or Create an account to join the conversation.

More
23 Sep 2012 21:35 #73609 by mordorf
Anyone found a way of setting 2048 bit RSA key?

Thanks in advance

Please Log in or Create an account to join the conversation.

More
27 Sep 2012 14:57 #73655 by nealuk
Try updating the firmware to 3.3.1, or maybe even better 3.3.1.1 ftp://ftp.draytek.pl/Seria_2950/Firmware/3.3.1.1/

Regards, Neal

Please Log in or Create an account to join the conversation.

Moderators: Sami