SmallNetBuilder Forums
Go Back   SmallNetBuilder Forums > Wireless Networking > ASUS Wireless > Asuswrt-Merlin

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 02-28-2013, 01:17 PM
adolchristin adolchristin is offline
New Member
 
Join Date: Feb 2013
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
adolchristin is just starting out
Default Store https certificate in NVRAM

First of all I'm a recent convert to merlinwrt and I must say that I think it's fantastic.

Is there a way to store the certificate for https in NVRAM so it's not regenerated at boot every time?
Reply With Quote
  #2  
Old 03-01-2013, 11:39 AM
sabot105mm sabot105mm is offline
Member
 
Join Date: Feb 2013
Posts: 48
Thanks: 3
Thanked 4 Times in 1 Post
sabot105mm is just starting out
Default

Look at this. It downloads the cert to jffs dir, much better this way

wget -c -O /jffs/configs/Equifax_Secure_Certificate_Authority.pem http://www.geotrust.com/resources/ro..._Authority.pem

https://github.com/RMerl/asuswrt-mer.../Sending-Email
Reply With Quote
  #3  
Old 03-01-2013, 12:09 PM
adolchristin adolchristin is offline
New Member
 
Join Date: Feb 2013
Posts: 7
Thanks: 0
Thanked 0 Times in 0 Posts
adolchristin is just starting out
Default

I'm not quite sure I understand. So once I have this certificate stored in jffs how do I use it to override the https server certificate in merlin wrt?
Reply With Quote
  #4  
Old 06-18-2013, 06:34 AM
ingenium ingenium is offline
New Member
 
Join Date: Jan 2013
Posts: 6
Thanks: 0
Thanked 4 Times in 2 Posts
ingenium is just starting out
Default

Yeah, how would I set httpd to use this certificate instead of the auto-generated, self-signed one? I want to replace it with one that's trusted on my computers. I don't think it's in the NVRAM anywhere. "nvram show|grep CERTIFICATE" only brought up my VPN certificates. It doesn't look like the process has any more files open:

Code:
admin@RT-AC66U:~# ls -l /proc/`ps | grep 'httpd -s' | awk '{print $1}' | head -1`/fd/*
lr-x------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/0 -> /dev/null
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/1 -> /dev/null
lr-x------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/10 -> /tmp/Semaphore3
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/11 -> /tmp/Semaphore3
lrwx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/12 -> socket:[1641]
lrwx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/13 -> socket:[1728]
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/2 -> /dev/null
lrwx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/3 -> /dev/nvram
lr-x------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/4 -> /tmp/Semaphore0
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/5 -> /tmp/Semaphore0
lr-x------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/6 -> /tmp/Semaphore1
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/7 -> /tmp/Semaphore1
lr-x------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/8 -> /tmp/Semaphore2
l-wx------    1 admin    root            64 Jun 18 02:27 /proc/557/fd/9 -> /tmp/Semaphore2
I can't figure out what the Semaphore files are for... they all have a 0 byte size.

Last edited by ingenium; 06-18-2013 at 06:36 AM.
Reply With Quote
  #5  
Old 06-18-2013, 02:13 PM
ingenium ingenium is offline
New Member
 
Join Date: Jan 2013
Posts: 6
Thanks: 0
Thanked 4 Times in 2 Posts
ingenium is just starting out
Default

I figured out the default locations for the certificate. It's the same as dd-wrt (I'm guessing the same http server is used).

Put your certificate and key in /jffs/keys. Then add the following to /jffs/scripts/services-start
Code:
mv /tmp/etc/key.pem /tmp/etc/key.pem.bak
mv /tmp/etc/cert.pem /tmp/etc/cert.pem.bak
cp /jffs/keys/key.pem /tmp/etc/key.pem
cp /jffs/keys/cert.pem /tmp/etc/cert.pem
service restart_httpd
Reply With Quote
The Following User Says Thank You to ingenium For This Useful Post:
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off


All times are GMT -4. The time now is 05:30 PM.


Top 10 Stats
Top Posters* Top Thanked
RMerlin  398
L&LD  122
azazel1024  119
john9527  98
htismaqe  89
stevech  84
ColinTaylor  76
hggomes  54
sfx2000  51
Anzaia  45
RMerlin  6302
john9527  464
stevech  353
ryzhov_al  290
TeHashX  254
L&LD  245
RogerSC  204
sinshiva  146
sfx2000  136
joegreat  127
Most Viewed Threads* Hottest Threads*
Old Asuswrt-Merli...  59451
Old RT-AC68 -...  25875
Old Moderate Nat...  5566
Old ASUS RT-N66U...  5175
Old iOS 8.1...  4293
Old RT-AC87U -...  2897
Old New AC68...  2803
Old RT-AC68P QOS...  2351
Old AC68U,...  2210
Old Ruckus...  1983
Old Asuswrt-Merli...  255
Old RT-AC68 -...  141
Old Moderate Nat...  34
Old iOS 8.1...  33
Old RT-AC87U -...  26
Old RT-AC68P QOS...  24
Old How to flash...  24
Old Linksys...  21
Old Help Plz:...  21
Old Mac...  20


Powered by vBulletin® Version 3.7.3
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
© 2006-2014 Pudai LLC All Rights Reserved.