Deco caching old HTTPS certificate?

Deco caching old HTTPS certificate?

Deco caching old HTTPS certificate?
Deco caching old HTTPS certificate?
Friday
Model: Deco XE70 Pro  
Hardware Version:
Firmware Version: 1.211

I recently moved a web server from one machine to another. I am using the same domain name and the HTTPS certificates are handled by Let's Encrypt. I issued my new certificate and can access my domain on that single machine. Every other device on my network refuses to connect with the error "tls handshake error bad certificate". 

 

I have cleared the caches, try incognito mode, tried devices and browsers that I've never used before - none of them will connect. I tried Firefox incognito mode when I am on my wifi - TLS error and connection timed out but when I switch to 5G and use the same Firefox incognito mode - it works. This doesn't make sense to me because from my understanding HTTPS certificates are stored in the device, browser cache, ect. 

 

Is it possible the Deco is interfering somehow? I also changed my DNS server to Cloudflare 1.1.1.1 but that didn't seem to change anything.

  0      
  0      
#1
Options
1 Reply
Re:Deco caching old HTTPS certificate?
Saturday

  @sellarae 

 

Please see if the following suggestions help if not please get back to us 

 

Thanks for reaching out. From your description, it seems that after moving your web server to a new machine and updating your Let's Encrypt certificate, you can only access your domain from the server itself. All other devices on your Deco Mesh network receive a 'TLS handshake error bad certificate' when trying to connect, but the site works when you use mobile data (5G). This suggests the issue may be related to your Deco network or its settings.

Here are some steps to help you troubleshoot this issue:

1. Check if the issue is with your ISP or Deco network:
• Disconnect the main Deco from your modem and connect a PC directly to the modem. Try accessing your domain from the PC. If you still can't connect, the issue may be with your ISP or DNS propagation.
• If you can access your domain directly from the modem but not through Deco, the problem is likely with your Deco settings.

2. Ensure no VPN or network proxy is enabled on your devices, as these can sometimes interfere with HTTPS connections.

3. Update DNS settings:
• Open the Deco app and go to MORE > Internet Connection. Change the DNS server to 1.1.1.1 (Cloudflare) or 8.8.8.8 (Google).
• After updating the DNS server, reconnect your devices to the Deco network to ensure the new settings take effect.

4. Check Deco security features:
• On some Deco models, the 'Antivirus' or 'Real-Time Protection' features might block certain websites. Open the Deco app and check the Antivirus or Real-Time Protection history to see if your domain is being blocked.

5. Review Parental Control settings:
• Make sure there are no content filtering or website blocking rules that might affect your domain.

If you have tried all these steps and the issue persists, it could be related to DNS cache or certificate propagation delays. You may also want to reboot your Deco units and ISP modem to clear any cached data.

If you need further assistance, please let us know the results of these troubleshooting steps.

Need help with the Deco app, setup, Ethernet backhaul, network switch or rolling back firmware? Router or AP mode? https://community.tp-link.com/us/home/forum/topic/699816?page=1
  0  
  0  
#2
Options