Create and Apply SSL Certificate to OpenWRT LuCI Web Interface @i12bretro

Uploaded June 2023 | Updated September 2026, 2 weeks ago

#OpenWRT #SSL #HTTPS

Full steps can be found at i12bretro.github.io/tutorials/0382.html

--------------------------------------------------------------------
Prerequisites
--------------------------------------------------------------------
   - A XCA PKI database youtu.be/ezzj3x207lQ

--------------------------------------------------------------------
Create Your SSL Certificate
--------------------------------------------------------------------
   01. Launch XCA
   02. Open the PKI database if it is not already (File ≫ Open DataBase), enter password
   03. Click on the Certificates tab, right click on your Intermediate CA certificate
   04. Select New
   05. On the Source tab, make sure Use this Certificate for signing is selected
   06. Verify your Intermediate CA certificate is selected from the drop down
   07. Click the Subject tab
   08. Complete the Distinguished Name section
         internalName: openwrt.i12bretro.local
         countryName: US
         stateOrProvinceName: Virginia
         localityName: Northern
         organizationName: i12bretro
         organizationUnitName: i12bretro Certificate Authority
         commonName: openwrt.i12bretro.local
   09. Click the Generate a New Key button
   10. Enter a name and set the key size to at least 2048
   11. Click Create
   12. Click on the Extensions tab
   13. Select End Entity from the type list
   14. Click Edit next to Subject Alternative Name
   15. Add any DNS or IP addresses that the certificate will identify
   16. Update the validity dates to fit your needs
   17. Click the Key Usage tab
   18. Under Key Usage select Digital Signature, Key Encipherment
   19. Under Extended Key Usage select Web Server and Web Client Authentication
   20. Click the Netscape tab
   21. Select SSL Server
   22. Click OK to create the certificate

--------------------------------------------------------------------
Exporting Required Files
--------------------------------------------------------------------
   01. In XCA, click on the Certificates tab
   02. Right click the SSL certificate ≫ Export ≫ File
   03. Set the file name to uhttpd.crt verify the export format is PEM (*.crt)
   04. Click OK
   05. Click the Private Keys tab
   06. Right click the private key generated for the SSL certificate ≫ Export ≫ File
   07. Set the file name to uhttpd.key and verify the export format is PEM private (*.pem)
   08. Click OK

--------------------------------------------------------------------
Installing Prerequisites
--------------------------------------------------------------------
   01. Log into OpenWRT via SSH
   02. Run the following commands to install prerequisites
         # update opkg packages
         opkg update
         # install prerequisite packages
         opkg install luci-lib-px5g px5g-standalone libustream-openssl
         # install/update luci
         opkg install luci
         # restart uhttpd service
         /etc/init.d/uhttpd restart
   03. Download WinSCP winscp.net/eng/downloads.php
   04. Extract WinSCP and run the executable
   05. Connect to the OpenWRT IP address via WinSCP
   06. Navigate to /etc
   07. Rename uhttpd.crt and uhttpd.key to .old
   08. Copy the created uhttpd.crt and uhttpd.key to /etc
   09. Back in the terminal, run the following command to restart uhttpd
         /etc/init.d/uhttpd restart

--------------------------------------------------------------------
Applying SSL Certificates in Open-WRT
--------------------------------------------------------------------
   01. Open a web browser and navigate to https://OpenWRT_IP
   02. Authenticate at the Open-WRT login
   03. Select System ≫ System from the top navigation
   04. Set the hostname to match the hostname of the SSL certificate
   05. Click the Save & Apply button

Source: fabianlee.org/2016/09/19/openwrt-enabling-https-for-the-luci-web-admin-interface

### Connect with me and others ###
★ Discord: discord.com/invite/EzenvmSHW8
★ Reddit: reddit.com/r/i12bretro
★ Twitter: twitter.com/i12bretro

Create and Apply SSL Certificate to OpenWRT LuCI Web Interface

Self-hosted Wikipedia Style Wiki with MediaWiki on Windows

Run miniPaint - Browser Based Image Editor - on Linux

Install Akaunting - Open Source Accounting Software - On Windows

Installing phpBB Forum/Bulletin Board on Debian

Running a CloudReady ChromeOS VM in Virtualbox

Install Matomo - Self-Hosted Google Analytics Alternative - on Linux

Run the Official Debian Rolling Release - Sid - in a VirtualBox VM

$Run SolidInvoice - Open Source Invoicing Software - in Docker #SolidInvoice #Invoicing #Docker Full steps can be found at https://i12bretro.github.io/tutorials/0909.html What is SolidInvoice? SolidInvoice is a sophisticated open-source invoicing application designed to assist small businesses and freelancers in efficiently managing their daily billing operations. With its comprehensive range of features, this elegant online platform ensures that you receive timely payments. - https://github.com/SolidInvoice/SolidInvoice Installing Docker 01. Log into the Linux based device 02. Run the following commands in the terminal # install prerequisites sudo apt install apt-transport-https ca-certificates curl software-properties-common gnupg-agent -y # add docker gpg key curl -fsSL https://download.docker.com/linux/$(awk -F= /^ID=/{ print $NF } /etc/os-release)/gpg | sudo apt-key add - # add docker software repository sudo add-apt-repository deb [arch=$(dpkg print-architecture)] https://download.docker.com/linux/$(awk -F= /^ID=/{ print $NF } /etc/os-release) $(lsb_release -cs) stable # install docker sudo apt install docker-ce docker-compose containerd.io -y # enable and start docker service sudo systemctl enable docker && sudo systemctl start docker # add the current user to the docker group sudo usermod -aG docker $USER # reauthenticate for the new group membership to take effect su - $USER Running SolidInvoice 01. Now that Docker is installed, run the following commands to setup the SolidInvoice Docker container and run it # create working directories mkdir ~/docker/mariadb -p # set owner of working directories sudo chown $USER:$USER ~/docker -R # run the mariadb docker container docker run -d name mariadb -e MYSQL_ROOT_PASSWORD=r00tp@ss -e MYSQL_USER=solidinvoice_rw -e MYSQL_PASSWORD=SolidInv0ic3! -e MYSQL_DATABASE=solidinvoice -v ~/docker/mariadb:/var/lib/mysql restart=unless-stopped mariadb:latest # run the solidinvoice docker container docker run -d name solidinvoice link mariadb:solidinvoice -e DB_PASSWORD=SolidInv0ic3! -e DB_USER=solidinvoice_rw -p 8080:80 restart=unless-stopped solidinvoice/solidinvoice 02. Open a web browser and navigate to http://DNSorIP:8080 03. Click the Next button at the lower right corner of the System Requirements page 04. Complete the Database settings as follows: Driver: Mysql Host: mariadb Port: 3306 User: solidinvoice_rw Password: SolidInv0ic3! Database Name: solidinvoice 05. Click Next 06. After the database schema is created successfully ≫ Click Next 07. Click the Log In Now button 08. Login with the admin credentials created earlier 09. Enter a Company Name and select the default currency ≫ Click Create 10. Welcome to SolidInvoice Documentation: https://hub.docker.com/r/solidinvoice/solidinvoice/ ### Connect with me and others ### ★ Discord: https://discord.com/invite/EzenvmSHW8 ★ Reddit: https://reddit.com/r/i12bretro ★ Twitter: https://twitter.com/i12bretro$

Install Web Based Download Utility with Aria2 WebUI on Windows