DoT icon indicating copy to clipboard operation
DoT copied to clipboard

FRITZ!Box routers doesn't trust SSL.com ECC root certificate

Open JensSpanier opened this issue 1 year ago • 2 comments
trafficstars

It seems like AVM FRTIZ!Box routers don't trust the root certificate "SSL.com Root Certification Authority ECC" (0x75e6dfcbc1685ba8). It's only possible to use dot.sb if the certificate check is switched off.

I already contacted AVM and they replied

I have just forwarded your request to our product management as a suggestion for improvement, so that the root certificate you mentioned will be implemented in an upcoming update.

Just wanted to let you know, that dot.sb can't currently be used with FRITZ!Box routers if the certificate check isn't switched off.

JensSpanier avatar Oct 14 '24 13:10 JensSpanier

We don't have that router for testing. Please request them to update their CA certificates.

Showfom avatar Oct 18 '24 05:10 Showfom

I have the same problem with the newest FRITZ!BOX (8.00) versions. dot.sb is not working on different routers.

dpunkturban avatar Dec 22 '24 12:12 dpunkturban

Confirmed with 8.03.

trkoch avatar Jul 08 '25 17:07 trkoch

Confirmed with 8.03.

Please report the issue to the vendor, they should update their CA certificates.

Currently SSL.com is the only option to issue certificates for IPv6 address, we don't have other options :(

Showfom avatar Jul 08 '25 17:07 Showfom

Maybe this is worth a look for the future: https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/

JensSpanier avatar Jul 10 '25 05:07 JensSpanier

Maybe this is worth a look for the future: https://letsencrypt.org/2025/07/01/issuing-our-first-ip-address-certificate/

Yes we will try to use Let's Encrypt when they have IP address certificate in public.

Showfom avatar Jul 10 '25 10:07 Showfom

Please report the issue to the vendor, they should update their CA certificates.

I reported the issue to AVM and referenced this issue.

trkoch avatar Jul 18 '25 15:07 trkoch