When working with the device via HTTPS device generates a self-signed certificate. Installation of user certificate is available.
It should be noted that the performance of the device web
...
interface is reduced due to the length of the key.
Certificate installation
Creating a self-signed certificate with OpenSSL
...
| Code Block | ||
|---|---|---|
| ||
#!/bin/sh
CERT_PATH="."
CERT_NAME=${CERT_PATH}/"custom"
CERT_SUBJ="/C=SK/ST=Bratislava/L=Bratislava/O=Vutlan s.r.o./OU=IT Department/CN=vutlan.com"
openssl req -new -newkey rsa:2048 -days 365 -nodes -x509 -keyout "${CERT_NAME}.key" -out "${CERT_NAME}.pem" -subj "${CERT_SUBJ}" |
Then install files custom.pem and custom.key under the certificate installation key under the certificate installation procedure.
You can install your certificate on the Preferences -> Network page. You must enable HTTPS and upload the key and certificate files.
After clicking the Save button, the settings will be saved and the system will automatically restart automatically restart with new settings.
Or you can generate a self-signed HTTPS certificate directly in the system , if this function is supported. Press the Self-signed certificate -> Generate button and wait for the end of the procedure. The certificate name will be displayed in the appropriate fields. The certificate has a validity of 10 years.
| Info |
|---|
If the certificate files with an error and cannot be used by the system, then the system will use safe settings: port 80, HTTPS is disabled. TheThe log will be a corresponding error message. |
...
Certificate installation for versions 
2.5
Creating self-signed certificates by OpenSSL
Self-signed certificates can be generated by:
| Code Block | ||
|---|---|---|
| ||
openssl req -x509 -nodes -days 365 -newkey cert.key -out cert.crt |
Then combine with text editor both files cert.key and cert.crt in crt in next steps: in the beginning content of certcontent of cert.key, then the content of of cert.crt. Save a file like custom.pem, copy it to the USB-flash, and put a USB stick to the device USB port.
To install your own certificate file copy it to the USB-flash, rename the file to custom.pem, and put USB-flash to the device USB port.
After the completion of the exchange (the LED on the USB flash drive and flash off), remove the USB flash and open the web interface over HTTPS.