How to generate ssl certificate to use in adguard home/?

I used this method: https://openwrt.org/docs/guide-user/services/tls/acmesh to generate a certificate for duckdns domain

In luci installed acemesh

And also tried in busy box:

I keep getting the firewell error even thought the firewall is switched off in luci

Both via luci and on busybox but it keep generating key rather but not the certificate. I also searched around on the net for now last 3 days but couldn’t find an easy explanation/example that can be adopted to obtain ssl’s specialy for use in adguard home.

It looks like it is not written in detail about how to intall ssl cert fro use in adguard home and would be beneficial if someone who is well versed and is able to describe in detail , perhaps in a stepwise manner or a script…

This is a http challenge. In order to prove that you control the domain, the Acme server is trying to reach your website from outside and retrieve a file with the challenge secret. This would be appropriate if you were building a website that will be open to the public. Since you're making an internal site that's never going to be reachable from the Internet, consider DNS-01 challenge instead.

1 Like

I require them only for use in adguard home encryption fucntion

The cetificiates are generted by both methods ( in acemesh standalone and dns) but in .csr format and adguard home does not accept them

it appears that adguard home accepts .pem format

How do i generate .pem format certificates to use in adguard home ?

That's is not a question related to Openwrt, but I'm sure Google will be able to help you.

I'm guessing you need to convert it.

1 Like

CSR stands for Certificate Signing Request. That file is an incomplete certificate because it has not yet been signed by the external authority (Let's Encrypt in this case). There is no way to locally change it into something that a browser will recognize.

As mentioned, this is all completely outside of OpenWrt.

1 Like

Is there anyone able to guide me how to approach this issue of obtaining the certificates for use in adguard home
. I would like to use the encryption. Unfortunately, I have spend hours trying to generate one via above methods googling but and not getting anywhere?

An example of how others have generated would be very helpful for those who are illeterate in doing it.