Skip to main content
oheigl
oheigl
New Member
August 11, 2017
Question

Hashes of VPN, Certificates, WiFi Secret change with every show

  • August 11, 2017
  • 1 reply
  • 3559 views

Hey Guys,

I noticed a weird behavior on the latest 5.4.5 firmware.

If I enter a command like 

show vpn ipsec phase1-interface <name>
the PSK hash always changes with every execution of the command. Also If I make two configuration backups a few seconds within each other and make a diff, the hashes of the PSK and certificates and many more are different. Why is this happening and could this be a serious problem? 

On for example 5.2.11 they hashes always stay the same, like I'm used to, but not with 5.4.5.

Can someone explain this behavior to me, did something change internally on how these hashes are calculated?

Many thanks!

    1 reply

    bommi
    bommi
    New Member
    August 11, 2017

    Hi,

     

    I can see the same behavior in fortios 5.6.1.

    At least for my running system I cant see any issues with that, but what happens if we load an older config with one of that hashes?

     

    Regards

    Dominik

     

    Terms & ConditionsAccessibility statement