AiCloud/Disk self signed cert

[kryptto]

Group,

I would like to pose a question, though RMerlin had definite beliefs that it might not be possible. I would like to replace the self-signed cert with a "real" cert to avoid the browser issues etc/clean it up.

Is there a way or has anyone tried to do this? My current config is using DDNS and I do not have a static IP. I do own the domain name and control my domains DNS using a service. If I forgot anything please remind me...

I own two ASUS RT-N66U running Merlin's latest beta.

Kryptto

 

[dodava]

How to use a real certificate

I use a real certificate with my router. The following instructions assume basic knowledge of how to ssh to your router and use linux.

Pre-requisites

• jffs enabled and jffs partition formatted
• certificate in pem format
• certificate key in pem format with no password
• ddns configured

Instructions
Create /jffs/cert directory
Copy certificate to /jffs/cert/cert.pem
Copy key to /jffs/cert/key.pem
Create the file /jffs/scripts/init-start with the following content

#!/bin/sh
cp /jffs/cert/cert.pem /etc
cp /jffs/cert/key.pem /etc
cat /jffs/cert/key.pem /jffs/cert/cert.pem > /etc/server.pem
chmod 644 /etc/server.pem
nvram set https_crt_gen=0

Make init-start script executable
Create /jffs/configs/hosts.add
Add a line with your lan ip and the hostname you used when generating your certificate. For example:

 10.0.0.1 router.mydomain.com

Reboot the router

You should now be able to access the router via https using your chosen hostname without a certificate warning.