# $id: OpenSSL making certificate for HTTPS
# 03/09/05 (c)LANsys.ch


Making a custom SSL certificate for the HTTPS webGUI

Execute the following commands on any UNIX machine with OpenSSL installed:


openssl req -new -nodes > cert.csr
openssl x509 -in cert.csr -out cert.pem -req -signkey privkey.pem -days 365


The certificate can then be found in cert.pem and the private key in privkey.pem,
ready for copy & pasting to the Diagnostics: Advanced page. cert.csr is not
needed anymore. Note that if you screw up with the certificates and cannot access
the webGUI anymore, you may use the console menu option "Set LAN IP address";
it will ask you whether you want to revert to HTTP.



cert.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

privkey.pem

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----