D-Link Forums

The Graveyard - Products No Longer Supported => IP Cameras => DCS-932L => Topic started by: robert-e on February 04, 2015, 12:06:13 PM

Title: DCS 932 -- not shown in new software mitigating sslv3 insecurity (Solved)
Post by: robert-e on February 04, 2015, 12:06:13 PM
I see that updates are available for the 931 and the 933, as well as some other cameras.  What are our options for the 932l ?
Regards,
Bob
Title: Re: DCS 932 -- not shown in new software mitigating sslv3 insecurity
Post by: FurryNutz on February 04, 2015, 12:31:47 PM
What Rev is your camera?
What current FW version is currently loaded?
Most current version available are v1.09 for Rev A and v2.00 for Rev B.

What region are you located?
Title: Re: DCS 932 -- not shown in new software mitigating sslv3 insecurity
Post by: robert-e on February 04, 2015, 06:22:20 PM
cam is the A version, and the firmware is 1.09.  About a week or so I got a Java security error message regarding Java 8.  I did the workaround by setting java security to allow sslv3, and I was again able to check the camera video.  Yesterday, I got an error message regarding updated firmware (from dlink).  At that time I was not able to check the video again.  Thinking that the problem might be with firefox 35, changed the minimum tls version to 0, to allow sslv3 in firefox.  No joy there.  I am 2000 miles away from the camera, and when the new firmware becomes available for the 932, I will still have to deal with installing that firmware to the camera.  I might add that this (having to load new firmware remotely) is the second time tis has occured. 
Slightly annoyed,
Bob
Title: Re: DCS 932 -- not shown in new software mitigating sslv3 insecurity
Post by: JavaLawyer on February 04, 2015, 06:54:50 PM
I see that updates are available for the 931 and the 933, as well as some other cameras.  What are our options for the 932l ?
Regards,
Bob

The FW changes to for the 931L ,933L, 5010L, 5020L, etc. are limited to a new mydlink agent and "Removal of SSL, change to support TLS", nothing earth shattering. The upgrades have been trickling out over the past couple of weeks. I'm not sure what (if anything) is in the pipeline for the 930L/932L.
Title: Re: DCS 932 -- not shown in new software mitigating sslv3 insecurity
Post by: robert-e on February 05, 2015, 10:33:01 PM
Update on the Java/Firefox sslv3 workarounds.  Firstly I did the java security edits as linked by fuzzynuts on this forum  (about a week or so ago).  To be clear, this involved editing two java configuration files.  I then changed the min tls to 0 (zero), and changed (toggled) "network.http.spdy.enforce-tls-profile" from true to false.  I then restarted firefox, and logged onto mydlink.com normally.  The camera video came right up.

I am using Java 8; firefox 35.0.1, under Linux Mint (ubuntu).  Crossing my fingers that some other gotcha does not come down the shute with some OS system update. 

Just a further note..doing the above opens up your system to the POODLE (mitm) attacks.  For me, I could care less...I have good backups, and it only takes a few minutes to reinstall the OS.  I really need to monitor the camera..it "looks" at the temp of my furnace.

Regards,
Bob

Edit:
@ javalawyer...thanks for providing the 932l software update link..Now I will see if I can prevail on my son to drive out to my house to load the new software.  Perhaps I can promise to buy him lunch when we get home..lol

B