Customers With Disabilities
  • RESIDENTIAL
  • BUSINESS

    Verizon Business Sites

  • WIRELESS
  • Services  
  • My Verizon  

    Email & Calls

    Check Email

    Verizon Visual 411

     

     

    Bill & Payment

    View Bill

    Pay Bill

    Pay Final Bill

    Manage Auto Pay

    Manage Paper Free Billing

    My Services

    Add or Change Services

    Renew or Change Bundle

    Review Account

    Manage My Internet

    Manage My Voice

     

  • Support  

    Community help

     

     

     

     

  • Watch FiOS  

    Watch thousands of your favorite TV shows and movies On Demand and Live. Rent or buy your favorites and watch them on any device. Or, check what's on tonight and program your DVR. You can do it all!

    Watch Free TV & Movies

     

     

    Rent or Buy

    Set your TV Viewing Experience

  • Trending  

    Check out this personalized, real-time feed featuring the latest content and entertainment from around the Web including new headlines, sports, entertainment and more.

     

     

     

     

     

    See what's Trending!

Reply
Copper Contributor
annonymous009
Posts: 15
Registered: ‎07-04-2010
0 Kudos
Accepted Solution

Actiontec upgrade site certificate issues

 

I have automatic firmware upgrades disabled on my Actiontec MI424-WR, Rev C.  I tried to go to upgrade.actiontec.com to look to see if there are any newer versions of the firmware (I currently have version 4.0.16.1.56.0.10.12.3) , but my browser (Google Chrome) gave the following warning:
"You attempted to reach upgrade.actiontec.com, but instead you actually reached a server identifying itself as *.securesites.net. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of upgrade.actiontec.com. You should not proceed."
I then tried to use wget to directly download the latest firmware at the URL given on the router's firmware page, https://upgrade.actiontec.com/MI424WR/MI424WR.rmt, and got this error:
"ERROR: cannot verify upgrade.actiontec.com's certificate, issued by `/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com':
Unable to locally verify the issuer's authority."
Does this mean that someone is redirecting update requests to a rogue site, or has actiontec re-arranged their servers, but not gotten proper certificates?

 

Platinum Contributor I
Hubrisnxs
Posts: 5,721
Registered: ‎07-22-2009

Re: Actiontec upgrade site certificate issues

http://www2.verizon.net/micro/fios_router_update/

 

 

I think you have the latest though, when I click on the link the firmware version is the same as yours.

 

 

 


annonymous009 wrote:

 

I have automatic firmware upgrades disabled on my Actiontec MI424-WR, Rev C.  I tried to go to upgrade.actiontec.com to look to see if there are any newer versions of the firmware (I currently have version 4.0.16.1.56.0.10.12.3) , but my browser (Google Chrome) gave the following warning:
"You attempted to reach upgrade.actiontec.com, but instead you actually reached a server identifying itself as *.securesites.net. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of upgrade.actiontec.com. You should not proceed."
I then tried to use wget to directly download the latest firmware at the URL given on the router's firmware page, https://upgrade.actiontec.com/MI424WR/MI424WR.rmt, and got this error:
"ERROR: cannot verify upgrade.actiontec.com's certificate, issued by `/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com':
Unable to locally verify the issuer's authority."
Does this mean that someone is redirecting update requests to a rogue site, or has actiontec re-arranged their servers, but not gotten proper certificates?

 


 

Bronze Contributor II
ocean25
Posts: 279
Registered: ‎08-07-2010
0 Kudos

Re: Actiontec upgrade site certificate issues

 


annonymous009 wrote:

 

I have automatic firmware upgrades disabled on my Actiontec MI424-WR, Rev C.  I tried to go to upgrade.actiontec.com to look to see if there are any newer versions of the firmware (I currently have version 4.0.16.1.56.0.10.12.3) , but my browser (Google Chrome) gave the following warning:
"You attempted to reach upgrade.actiontec.com, but instead you actually reached a server identifying itself as *.securesites.net. This may be caused by a misconfiguration on the server or by something more serious. An attacker on your network could be trying to get you to visit a fake (and potentially harmful) version of upgrade.actiontec.com. You should not proceed."
I then tried to use wget to directly download the latest firmware at the URL given on the router's firmware page, https://upgrade.actiontec.com/MI424WR/MI424WR.rmt, and got this error:
"ERROR: cannot verify upgrade.actiontec.com's certificate, issued by `/C=ZA/ST=Western Cape/L=Cape Town/O=Thawte Consulting cc/OU=Certification Services Division/CN=Thawte Premium Server CA/emailAddress=premium-server@thawte.com':
Unable to locally verify the issuer's authority."
Does this mean that someone is redirecting update requests to a rogue site, or has actiontec re-arranged their servers, but not gotten proper certificates?

 


 

    Did you try enabling auto firmware updates, then check. If updated you can revert back to

    disabling them. I'd suggest a complete spyware and anti-virus run first. Good luck!

Platinum Contributor I
Hubrisnxs
Posts: 5,721
Registered: ‎07-22-2009

Re: Actiontec upgrade site certificate issues

A lot of time site certificates errors are due to your windows clock date and time. So as weird as it may sound double click on your clock and make sure its the right date year and time.
Copper Contributor
annonymous009
Posts: 15
Registered: ‎07-04-2010

Re: Actiontec upgrade site certificate issues

Well, now the site is working, but it tells me that directory browsing is disabled, and to use a direct url.  Why the router's update page tells you to go there, I don't know.

 

I know my pc's clock was correct, the only thing that's changed is a momentary power outage here caused the router to reboot, so maybe something got reset there.  All my custom settings seem to be like I left them, though.

 

My Verizon

Support Tools

Watch FiOS

Trending

  • Visual 411