:rotating_light: Beware of NetScaler *14.1 build 2...
# citrix-netscalerj
Jan Tytgat
08/20/2024, 7:53 AM🚨 Beware of NetScaler 14.1 build 29.63: this is a broken build for VPX Express!!
Fresh installs and upgrades from previous versions cause the license check to fail on boot, rendering the appliance useless as there aren't any available SSL Ciphers except for the "EXPORT" variants.
Proceed with caution on production systems!!
🙏 2
🙏🏼 1
k
Kari Ruissalo (WyW)
08/20/2024, 11:08 AMhttps://community.citrix.com/forums/topic/253174-mutilated-tls-support-after-update-141-2963-on-freemium-appliances/ seems someone else has ran in to this too
j
Jan Tytgat
08/20/2024, 11:08 AMIt's already internally confirmed as a bug
👍 1
Jan Tytgat
08/20/2024, 11:09 AMThey are aware and working on it
k
Kari Ruissalo (WyW)
08/20/2024, 11:09 AMmight be worth the while to drop a note in community of this too?
j
Jan Tytgat
08/20/2024, 11:17 AMI responded to his post in the meantime.
👍 1
Jan Tytgat
08/20/2024, 11:18 AMI've asked the PM if it would be wise to pull the upgrade for now.
However, I'm not sure if proper licensed VPX instances (pooled/flex) are impacted by this or not, since I don't have a license to test it against.
👍 1
k
Kari Ruissalo (WyW)
08/20/2024, 11:44 AMnot too eager to install new builds as soon as they're released to any prod environment either, was looking forward of having that 20mb box for test environments though
j
Jan Tytgat
08/20/2024, 11:46 AMWe were able to upgrade our internal vpx as some of our non-critical things run on a free vpx precisely to live on the latest build.
Jan Tytgat
08/20/2024, 11:46 AMI couldn’t care less if it dies :-)
k
Kari Ruissalo (WyW)
08/20/2024, 11:48 AMgood that you have that
🙏 1
r
Richard Faulkner
08/20/2024, 5:05 PMyeah, I was wanting one for home lab use. Guess I'll be waiting for a bit.
j
Jeff Riechers
08/21/2024, 10:17 AMInteresting. This one was supposed to get those features, not destroy them. #Obi-Wan
💩 1
🤣 1
m
Marco Hofmann
08/25/2024, 9:32 AMFuck, I totally ran into this error.
We used Freemium at several customers just for load balancing Storefront/Director and now one of them died exactly because of this bug.
🚨 1
c
Chai
09/03/2024, 5:52 PM@Jan Tytgat I do not see 14.1 29.65 anywhere.. I just downloaded 14.1 29.63 version, but when I try to import a certificate, it says "Certificate with key size greater than RSA512 or DSA512 bits not supported" on 4096 cert. When I tried with 2048 size cert, it throws below error. None of the certs are imported.
r
Richard Faulkner
09/03/2024, 5:53 PMYou have to download the patch for VPX Express users only under the VPX download. I do not know why they did not put it in the firmware section as well.
Richard Faulkner
09/03/2024, 5:54 PM@Jan Tytgat posted the method to find it
You can find the build under:
Downloads --> NetScaler --> Virtual Appliances --> Citrix ADC VPX Release 14.1 --> 14.1-29.63 --> Citrix ADC Upgrade Package-14.1-29.65 (for VPX Express users only)
c
Chai
09/03/2024, 5:54 PMI see it now, thank you. Let me download it and install the firmware.
r
Richard Faulkner
09/03/2024, 5:55 PMThank you @Jan Tytgat. I couldn't find it either. 😛
c
Chai
09/03/2024, 5:57 PMThank you @Jan Tytgat
Chai
09/03/2024, 6:19 PM@Richard Faulkner @Jan Tytgat upgraded the netscaler, and certificate imported successfully.
🙌 1
r
Richard Faulkner
09/03/2024, 6:20 PMSide note, are you running a pair, or a single? I am still struggling to get an HA pair setup even on the new build
c
Chai
09/03/2024, 6:24 PMSingle standalone node for now.
👍 1