https gui problem

INFO
RG-AP720
version AP_RGOS 11.1(9)B1P21, Release(06211815)
GOALS:
1. enable https gui port 4443 then disable http gui
2. want to change ssh port from 22 to 4022
3. restrict ssh and gui access from ip 192.168.1.111 only
PROBLEMS
1. https gui not working
no enable service web-server http
enable service web-server https
web-server http redirect-to-https
===
with above config, when I open https :// ipaddress with Chrome or Opera
I got black screen with this error
ipaddress uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.
?
1. beside that https gui problem
how to achieve my goals
tq

Hi sir,

can you please show me this result?
sh web-ser sta
enable https gui port 4443 then disable http gui

conf t
http secure-port 4433


Best regards,
Steve

GTAC-Steve replied at 2023-12-12 22:48
Hi sir,

can you please show me this result?

#show service
web-server   : disabled
web-server(https): enabled
snmp-agent    : enabled
ssh-server    : enabled
telnet-server : disabled
#sh run
http redirect port 4443
http secure-port 4443
enable service web-server https
web-server http redirect-to-https
enable service ssh-server
(config)#crypto key generate dsa
How many bits in the modulus [512]:2048
(config)#crypto key generate rsa
How many bits in the modulus [512]:2048

1. when I enable https 4443
open browser on https :// ip:4443
I still got this error
uses an unsupported protocol.
ERR_SSL_VERSION_OR_CIPHER_MISMATCH
Unsupported protocol
The client and server don't support a common SSL protocol version or cipher suite.

nbctcp bun replied at 2023-12-12 23:03
#show service
web-server   : disabled
web-server(https): enabled

any update on this
it seems difficult just to enable https gui
if this firmware bug, and no further firmware development
will you send me a replacement device with no bug
I got replacement device on brand CxxxxxM when found a bug

nbctcp bun replied at 2023-12-14 10:08
any update on this
it seems difficult just to enable https gui
if this firmware bug, and no furthe ...

Hi sir,
Sorry for my late reply.
can we talk on Tech Support Robot:
www.ruijienetworks.com/rita?




Best regards,
Steve

GTAC-Steve replied at 2023-12-14 14:09
Hi sir,
Sorry for my late reply.
can we talk on Tech Support Robot:

check CS20231214-2871302
I have problem talk with robot
for example I said I can ping ssh http gui to AP
robot said
open cmd and typing ping apip
I said enough talk with robot
better talk with engineer
Its clear to human in previous post I said I can ping http and ssh
no need to ping anymore

nbctcp bun replied at 2023-12-14 16:18
GTAC-Steve replied at 2023-12-14 14:09
Hi sir,
Sorry for my late reply.

Hi sir,

The arrow I marked for you is live chat, which goes to an online conversation so we can communicate in real time.
Best regards,
Steve

GTAC-Steve replied at 2023-12-14 16:31
Hi sir,

The arrow I marked for you is live chat, which goes to an online conversation so we can c ...

Problem I found
1. ur case website hard to read because all reply in one continious line
2. ur firmware is very old and only support TLS1.0
all new browser only support TLS 1.3
how to proof that


Need to enable deprecated tls version
open Firefox
In the url box type "about:config" without quotes
Accept the risk warning
In the search box type "security.tls.version.enable-deprecated" without quotes
Switch the value to "True"
2 OPTIONS HERE
1. release new firmware ASAP
2. if the firmware no longer developed
send me similar AP with latest firmware
I have quite similar issue with Cambium AP, they send me a new similar AP for FREE