frodovdr/raspap-webgui
1
0
Fork 0
mirror of https://github.com/billz/raspap-webgui.git synced 2023-10-10 13:37:24 +02:00
Code Issues Releases Wiki Activity

Created SSL certificates (Quick Installer) (markdown)

Bill Zimmerman 2019-11-08 11:02:47 +01:00
parent b73c8cbbad
commit e0ddaa7e8e
1 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
SSL-certificates-(Quick-Installer).md Normal file

@ -0,0 +1,30 @@
### Quick Install method
The Quick Installer may be used to generate SSL certs with `mkcert`. The installer automates the manual steps [described here](https://github.com/billz/raspap-webgui/wiki/HTTPS--support/), including configuring lighttpd with SSL support. It's recommended to review the [manual setup](https://github.com/billz/raspap-webgui/wiki/HTTPS--support/) to get an idea of what is happening behind the scenes.
Simply append the `-c` or `--cert` option to the Quick Installer, like so:
`wget -q https://git.io/voEUQ -O /tmp/raspap && bash /tmp/raspap --cert`
**Note:** this only installs `mkcert` and generates an SSL certificate with the input you provide. It does _not_ (re)install RaspAP.
![](https://i.imgur.com/980pfUG.gif)
The advantage with this method is it generates valid certificates signed by your own private CA, rather than self-signed certificates. The Quick Installer does not automatically configure clients to trust the certificates, however — that's up to you. See the steps below.
### Client configuration
Open a browser and enter the address: http://raspberrypi.local/rootCA.pem (this URL may be your IP address or a different hostname, depending on your unique setup). Download the root certificate to your client and add it to your system keychain. Examples below illustrate this process on OSX:
![](https://i.imgur.com/RCJJPYL.png)
Be sure to set this certificate to "Always trust" to avoid browser warnings.
![](https://i.imgur.com/Lx8Plqi.png)
Finally, enter the address https://raspberrypi.local in your browser. Enjoy an encrypted SSL connection to RaspAP.
### Mobile devices
For the certificates to be trusted on mobile devices and remote clients, you will have to install the root CA using the method described above. Alternatively, on iOS, you can either use AirDrop or email the CA to yourself. After installing it, be sure to enable full trust.
More advanced topics are [covered at mkcert](https://github.com/FiloSottile/mkcert#advanced-topics).