What's new

[RT-N66U] How to setup https (w/ trusted CA certs, etc)?

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

ags

Regular Contributor
I've setup my RT-N66U as a VPN server (openVPN). I'm using stock Asus firmware. So I have figured out how to have the self-signed certs and DH keys generated and exported. With the recent change by openSSL to require longer DH keys, I've also figured out how to generate my own and import them into the router.

I have https enabled, and get warnings each time I login (untrusted root certificate). I'd like to use a signed certificate for https. I don't see any way to import this. Is the same certificate used for https as is used for openVPN server? I'd appreciate help in how to setup a secure, trusted https server. Thanks.
 
Last edited:
Thanks for the reply. I did find that. It specifically calls for the Merlin firmware. I didn't try it, thinking the features used were only available in the non-OEM versions. (i.e. https_crt_save, https_crt_file)
 
ags, can I ask how you created the CA, cert, key, and DH params? I'm trying to do the same thing but not sure how to do this. And did you get the instructions from the above gist to work?


Jim
 
ags, can I ask how you created the CA, cert, key, and DH params? I'm trying to do the same thing but not sure how to do this. And did you get the instructions from the above gist to work?


Jim

I used startSSL (a CA) to generate the certificates necessary for an https server.
The certificate, keys and DH I used for openVPN on the router were generated on the router. Note that you may need to generate the DH params externally and load into the router's openVPN settings as the minimum size (bits) was increased beyond what the router generates. Hope this helps.
 

Similar threads

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top