Difference between revisions of "OpenWRT LuCI GUI with UHTTPD using HTTPS"

m
m
Line 44: Line 44:
</syntaxhighlight>
</syntaxhighlight>


===== Firewall =====
=====Firewall=====
Don't forget to add settings to the Firewall.  This is only needed if remote management is needed.  Even though UHTTPD is really good about security, it is strongly recommended to restrict GUI access to a limited number of IP Addresses.  See example below;<syntaxhighlight lang="text">
Don't forget to add settings to the Firewall.  This is only needed if remote management is needed.  Even though UHTTPD is really good about security, it is strongly recommended to restrict GUI access to a limited number of IP Addresses.  See example below;<syntaxhighlight lang="text">
config rule
config rule
Line 94: Line 94:


In fact after an hour of testing the LuCU HTTPD GUI was so wonky and unpredictable, it became pointless to give explicit directions.  That combined with a rather curious feature of clicking on the "Remove old certificate and key" Button redirecting to a URL that claims it "can't display this page", but is the exact same as the one can go "back" to, that works.
In fact after an hour of testing the LuCU HTTPD GUI was so wonky and unpredictable, it became pointless to give explicit directions.  That combined with a rather curious feature of clicking on the "Remove old certificate and key" Button redirecting to a URL that claims it "can't display this page", but is the exact same as the one can go "back" to, that works.
Another rather angry note to put in here if you're using a Buffalo WZR-600DHP router, it's just fucking broken and won't god damned work with HTTPS, so use PPTP or OpenVPN.  Fuck it all!


=====Items of Note=====
=====Items of Note=====
Line 110: Line 112:
Bottom line is that this LuCI GUI is rough and needs some tweaks.  You're better off using text files to configure UHTTPD.
Bottom line is that this LuCI GUI is rough and needs some tweaks.  You're better off using text files to configure UHTTPD.


===== Questions =====
=====Questions=====
Given the push for everything being secure, it's really a wonder all of this isn't part of a default package thing for the Linksys AC Series of routers given how much storage space they have.  For smaller routers with less storage space, it is certaintly understandable for conserving storage space, yet...  Hmmm...<br />
Given the push for everything being secure, it's really a wonder all of this isn't part of a default package thing for the Linksys AC Series of routers given how much storage space they have.  For smaller routers with less storage space, it is certaintly understandable for conserving storage space, yet...  Hmmm...<br />