OpenWrt Forum Archive

Topic: Where is the wiki that describes how to setup HTTPS for Luci?

The content of this topic has been archived on 16 Apr 2018. There are no obvious gaps in this topic, but there may still be some posts missing at the end.

All I can find is the SSH setup. Why is there no documentation on how to implement the HTTPS with certificate?

(Last edited by Lou-ltef on 2 Feb 2016, 09:14)

It's not a question of LuCI.
It's a question of what WEB-Server you are using to provide LuCI GUI.

opkg update && opkg install luci-ssl && /etc/init.d/uhttpd restart

jow wrote:

opkg update && opkg install luci-ssl && /etc/init.d/uhttpd restart

Sorry guys. I like accessing openwrt via Firefox. I appreciate being able to see that a secure connection has been established (green lock icon). And then logging into LuCI.

There used to be a WebUI section of a wiki (http://wiki.openwrt.org/doc/howto/secure.access) that described the following and I wondered if these steps are still valid for getting https when at the login screen when using Firefox:

1) install cert generator and web server TLS plugin
opkg install px5g uhttpd-mod-tls

2) optionally instruct the server to not listen on plain HTTP anymore
uci delete uhttpd.main.listen_http
uci commit

3) restart the web server to trigger certificate generation
/etc/init.d/uhttpd restart

4) optionally remove the key generator
opkg remove px5g

EDIT: I'm confused. do I need to install the luci-ssl package also? I don't have it installed now (I just did the 4 steps above) and I have an HTTPS connection in Firefox when I go to the LuCI login portal.

(Last edited by Lou-ltef on 2 Feb 2016, 21:13)

luci-ssl automates all of the above.

jow wrote:

luci-ssl automates all of the above.

Thanks jow. Do you recommend one installation-route (for getting HTTPS) over the other? Or doesn't matter--they both lead to the same setup. does luci-ssl also instruct the server to not listen on plain HTTP anymore?

"opkg info luci-ssl" doesnt really give much info on it.

The discussion might have continued from here.