Coova chilli captive portal redirect to login page, problems with https://

Installing and Using OpenWrt
1

Iam working on lede/openwrt install with coova chilli . everything works except https:// redirect to my login page
e.g.

If i type in my web broswer
http://www.website.com ---> I get redirected to my login page, this works

If i type in my web broswer
https://www.website.com ---> I get "failed to connect"

If i login using the first example i can then surf the web using https:// web sites

Has anybody got any thoughts on this?

Thanks

2

Yes: Works as expected.
There are a lot of posts on the web for clarification.

1 Like
3

please share the link sir

4

i tried this ..but not succesfull

https://uz.sns.it/~enrico/site/posts/networking/coova%20chilli/enabling-https-redirect-in-coova-chilli.html

5

Though you don't have bad intent, the technology is the same as what a malicious fake website or "man in the middle" would do-- show the user a page that is not actually from the server in the URL.

Https is designed to protect the user from seeing fake sites. It is working as expected.

1 Like
6

I concur with @reinerotto and @mk24, this behavior is the normal and expected of a Captive Portal without advanced HTTPS man-in-the-middle configurations designed to decrypt HTTPS traffic. HTTPS decryption is usually done on government, corporate and military networks where the end-user is never the owner of the generated traffic.

Also, you cannot access and verify the correct domain HTTPS certificate on the client until it has Internet access, so it is not possible to have a HTTPS Captive Portal page respond to any domain you enter into the browser.

What you suggest is dangerous, and requires your device to generate a Wildcard Root Certificate, or to generate individual certs on the fly. Both options greatly place your network at risk for compromise and easy interception of HTTPS traffic on your network - without your knowledge.

1 Like