What's new

Offloading ssl/tls for https (the router handling the https, routing http through)

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

JCompagner

New Around Here
The router does get now lets crypt certificats so i guess by ddns domain xxxx.asuscomm.com has a nice valid certificate that i can use

But what like todo is forward the traffict that comes on https:/xxxxx.asuscomm.com to my local raspberry which does handle pure http on a specific port

So a virtual portmapping from 443 to internalip:8321 but that the router handles the https ...

Is that possible somehow?
 
Is it a web site traffic you are trying to forward? I have installed nginx on the router and set it up as a SSL Reverse proxy. I am sure you can use other entware proxy solutions as well.
 
Maybe, I am not 100% clear of what you want to do.
 
just offloading https on the router (so the router handles all incoming https with the letscrypt certificate it already has)

Then it relays the httpS traffic through as http to my Pie

so the pie doesn't see it as https but just plain http
because the router handled that traffic
 
OK, so then a reverse proxy that supports SSL is what you want. I've done that on the router before using NGINX, but there are plenty of options in entware.
 
Are you saying you want the Pi to be a man-in-the-middle for ALL your in/out 443 traffic or that you want to downgrade only for specific traffic TO the Pi from outside?
 
Enable HTTPS for the Raspberry Pi and install your SSL certificate to the Raspberry Pi. If you are using Asus DDNS then the certificate and private key will be found in the jffs.

Then perform port forwarding on the router and everything will work.

Don't use a reverse proxy, it just adds unnecessary overhead. lets the router be a router.
 

Latest threads

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top