Self-Signed Certs (Question)

[kadko]

Hello!!

Well i have a question, I'm not able to make my own config file because i got an error like this
=== 1970-01-01 00:04:23 Notice M572.0 T1 No Ucd Timeout - Reinitialize MAC... ===

Actually i dont use Certificates on my modem but i use Bpi+ Docsis 1.0 in order to get online.

My certificate compilation (docsis) is 1.1.


Well, the question is "What's a self signed certificate"

I ask this because when i change the mac address the first thing that the web gui say is

==Previous Certificate was self-signed, back up not performed===

I think that i can't use my own configs because the Docsis certs have one type of a key or something like that.

Well some one can explain me that and another metod to get working my own config?

[drewmerc]

i think its the communty string your after (never had to bother with certs myself so i could be wrong)

You need to look in the config file from your area.
Look for this OID in Vulture ware.
"docsDevNmAccessCommunity"

also

1. Save original copy of your config.
2. Open config in VultureWare Docsis Editor (http://www.vulturesnest.net/cfgedit.html) don't change anything and just save it. Editor will ask for auth string. Leave it blank. Just press ok.
3. With Docsis 0.9.5 (http://sourceforge.net/projects/docsis/files/) decode both configuration files and compare CmMic and CmtsMic lines in both files. If they are identical, your ISP uses no share secret. Like mine So you can set Download and Upload to 0 in VultureWare Docsis Editor, save the config with empty auth string, and upload config to modem, reboot it and enjoy full speed.

By the way some ISPs use outdated CMTS which do not check if Mic lines are present in config files. On that CMTS you can bypass Mic checks by stripping them from config file with TCNISO MD5Remover (or just hexeditor) even if shared secret is used. But your modem firmware should support config file without Mic lines. As far as I know, Haxorware supports this feature but SB5100MoD not.

In case that above variants are not applicable, you can try to bruteforce Mics by TCNISO DiFileCPE. By the way somebody tryed PasswordsPro? (http://www.insidepro.com/eng/passwordspro.shtml) it supports HMAC-MD5.