Firmware update Issue

[ffranceg]

I have a Wireless Edge Service J9051A mounted in a HP Switch 5406zl (J8697A)

ProCurve 5406zl CS01# sh flash
Image Size (bytes) Date Version
----------------- ------------ -------- --------------
Primary Image : 15742039 10/28/19 K.16.02.0028
Secondary Image : 16218624 11/10/14 K.15.15.0009

Boot ROM Version
----------------
Primary Boot ROM Version : K.15.30

Default Boot Image : Primary

ProCurve 5406zl CS01(wireless-services-E) #sh flash
Image Build Date Install Date Version
----- -------------------- -------------------- --------------
Primary May 30 01:12:16 2009 Nov 05 15:23:48 2009 WT.01.28
Secondary unknown unknown unknown

Current Boot : Primary
Next Boot : Primary
Software Fallback : Enabled

When i am trying to update the firmware have this answer:

upgrade tftp://192.168.0.80/WT_01_39.img

ProCurve 5406zl CS01(wireless-services-E) #sh upgrade-status detail
Last Image Upgrade Status : Update error: Failure in openssl. Verification failure. certificate has expired
Last Image Upgrade Time : Thu Nov 14 10:25:25 2019
--------------------------------------------------------
Running from partition /dev/hda5, partition to update is /dev/hda6
var2 is 5 percent full
/tmp is 2 percent full
Free Memory 669560 kB
FWU invoked via Linux shell
Reading image file header
Removing other partition
Making file system
Extracting files (this can take some time).
Verification failure
30565:error:21075075:lib(33):func(117):reason(117):NA:0:Verify error:certificate has expired
Are you sure the certificate is valid? The date is Nov 14 10:24:41 2019
The certificate valid times are: notBefore=Aug 31 22:39:12 2006 GMT notAfter=Aug 28 22:39:12 2016 GMT
Update error: Failure in openssl. Verification failure. certificate has expired

Same issue when try a diiferent firmare (WT_01_33.img)

Does anyone have a solution to this problem?
Thanks

Note : Admin: P.S:Moved as a new topic from Firmware update Unsuccessful 

[parnassus · Accepted solution]

Rough mode...have you tried the same procedure after manually changing (temporarily, eventually disable any NTP timesync reference you had) the switch date back to a date before 28 August 2016 (end date of Certificate validity, as reported)?

That is to avoid:

"Are you sure the certificate is valid? The date is Nov 14 10:24:41 2019
The certificate valid times are: notBefore=Aug 31 22:39:12 2006 GMT notAfter=Aug 28 22:39:12 2016 GMT
Update error: Failure in openssl. Verification failure. certificate has expired"

Otherwise first you should understand how to update SSL Certificate installed.

[ffranceg]

As advised I changed the system date.

ProCurve 5406zl CS01(wireless-services-E) #sh upgrade-status detail
Last Image Upgrade Status : Successful
Last Image Upgrade Time : Sat Jun 6 16:49:50 2015
--------------------------------------------------------
Extracting files (this can take some time).
Version of firmware update file is WT.01.39
Creating vmlinux files
Creating config.kingsnake files
Creating xlrdiag
Successful

ProCurve 5406zl CS01(wireless-services-E) #sh flash

Image Build Date Install Date Version
----- -------------------- -------------------- --------------
Primary May 30 01:12:16 2009 Nov 05 15:23:48 2009 WT.01.28
Secondary Feb 04 06:46:03 2011 Jun 06 16:49:50 2015 WT.01.39

Thank you very much

[parnassus]

Glad it worked. Have a nice day.