SSL-certificate installation
When working with the device via HTTPS device generates a self-signed certificate. Installation of user certificate is available.
It should be noted that the performance of the device web interface is reduced due to the length of the key.
Certificate installation
Creating a self-signed certificate with OpenSSL
Self-signed certificates can be generated with a script:
#!/bin/sh
CERT_PATH="."
CERT_NAME=${CERT_PATH}/"custom"
CERT_SUBJ="/C=SK/ST=Bratislava/L=Bratislava/O=Vutlan s.r.o./OU=IT Department/CN=vutlan.com"
openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout "${CERT_NAME}.key" -out "${CERT_NAME}.pem" -subj "${CERT_SUBJ}"
Then install files custom.pem
and custom.key
under the certificate installation procedure.
You can install your certificate on the Preferences -> Network page. You must enable HTTPS and upload the key and certificate files.
After clicking the Save button, the settings will be saved and the system will automatically restart with new settings.
Or you can generate a self-signed HTTPS certificate directly in the system if this function is supported. Press the Self-signed certificate -> Generate button and wait for the end of the procedure. The certificate name will be displayed in the appropriate fields. The certificate has a validity of 10 years.
If the certificate files with an error and cannot be used by the system, then the system will use safe settings: port 80, HTTPS is disabled. The log will be a corresponding error message.
Certificate installation for versions 2.5
Creating self-signed certificates by OpenSSL
Self-signed certificates can be generated by:
openssl req -x509 -nodes -days 365 -newkey cert.key -out cert.crt
Then combine with text editor both files cert.key
and cert.crt
in next steps: in the beginning content of cert.key, then the content of cert.crt
. Save a file like custom.pem
, copy it to the USB-flash, and put a USB stick to the device USB port.
To install your own certificate file copy it to the USB-flash, rename the file to custom.pem
, and put USB-flash to the device USB port.
After the completion of the exchange (the LED on the USB flash drive and flash off), remove the USB flash and open the web interface over HTTPS.