crazyjurich
n3wb
I have a set of small Hikvision cameras like DS-2CD2443G0-IW.
I wanted to transfer them from HTTP to HTTPS with my own certificates, own self-signed CA.
I have wasted like a day trying with no success. I have found some information on the internet, like:
I have also updated the firmware to the latest I found - V5.6.6 build 210625
I tried signing CSR generated by camera, I tried importing private key+certs. I tried importing with trust chain, and simply self-signed server cert+key, I've tried replicating attributes of camera-generated cert. Still no luck, I continue getting "Certificate error. Recreate a certificate and try again". Interesting thing is that after firmware upgrade, Hikvision can read my certs, it shows the cert info on the screen, but still shows the mentioned Certificate error.
If someone managed to do this, please share cert file example (please don't publish your real private keys!
), or a list of Linux commands that produce a PEM file that gets accepted by Hikvision.
I wanted to transfer them from HTTP to HTTPS with my own certificates, own self-signed CA.
I have wasted like a day trying with no success. I have found some information on the internet, like:
- Uploadable file should be in PEM format
- File should contain all required certificates/keys separated with linefeed
- File name should be simple, dots (more than one) or special symbols may break it
I have also updated the firmware to the latest I found - V5.6.6 build 210625
I tried signing CSR generated by camera, I tried importing private key+certs. I tried importing with trust chain, and simply self-signed server cert+key, I've tried replicating attributes of camera-generated cert. Still no luck, I continue getting "Certificate error. Recreate a certificate and try again". Interesting thing is that after firmware upgrade, Hikvision can read my certs, it shows the cert info on the screen, but still shows the mentioned Certificate error.
If someone managed to do this, please share cert file example (please don't publish your real private keys!
), or a list of Linux commands that produce a PEM file that gets accepted by Hikvision.