Connect to webui via https

[E.S]

With 380.65 beta2 if I set web interface authentication method to https, I find it extremely hard to ever get back into the router, browsers just will not connect properly. I am using AC3200.

I have added exceptions to the browsers but even then 9 times outta 10 it wont connect, even using asus router app for ios it wont connect when using https, it only does if authentication is set to http or both.

I have tried these browsers on windows 10, internet explorer, firefox, cyberfox and chrome.

On my ipad/iphone I have tried safari, chrome, firefox , it just wont connect at all on ios when set to https, I have only ever managed to get back into the routers webui on my pc, but with a fight.

It used to work ok before I upgraded to 380.65 beta2, but I cant recall what firmware version I was using previously as it was a good 8+ months since I last updated the router.

Can anyone shed any light on this and if their is a fix or work around.

Thanks.

 

[pattiri]

I'm having this issue only for safari on my iphone. It always says that web page has errors etc and can't open webui most of the time. That's why I configured it to HTTP and if I need access from WAN, first I connect with VPN then access webui with LAN IP address of router.

 

[florid]

I'm having this issue only for safari on my iphone. It always says that web page has errors etc and can't open webui most of the time. That's why I configured it to HTTP and if I need access from WAN, first I connect with VPN then access webui with LAN IP address of router.

Same error from iPhone safari.

 

[E.S]

Yea, thats what happens with me, says the webpage has errors etc.

Kinda glad am not the only one having the same problem, rules out a hardware failure or bad firmware flash at my end.

Hopefully merlin might shed some light on the problem and possibly a solution ?

 

[Wutikorn]

Not sure if this will help, but you can try importing router's SSL certificate to your phone and see if WebUI is any better. I had the same problem, but, for some reasons, after importing router's SSL certificate to every of my device, HTTPS WebUI works much better.

However, SSL certificate normally changes after a reboot of router, so you might want to follow this link to make the router uses the same SSL certificate all the time.

Before doing this, you can try on one device first. If it works, follow the link, reboot, then import SSL Certificate to any device you want to access WebUI through HTTPS.

 

[E.S]

How do I add the ssl certificate ? Is it just by visiting the routers login page, a warning pops up asking you to accept and for you to continue, basically adding an exclusion to the browser.

If that is the case, if I remember that doesnt work.

If it is emailing the ssl certificate to yourself and then installing it that way on ios, I am unsure of where I get the routers ssl certificate from to email it to myself.

I did have a quick look in the routers gui but nothing popped out at me except vpn ssl, which I presume is not what I am looking for, then again after having another look at it, maybe it is what I am looking for ?

 

[Wutikorn]

How do I add the ssl certificate ? Is it just by visiting the routers login page, a warning pops up asking you to accept and for you to continue, basically adding an exclusion to the browser.

No, that's for temporary.

If it is emailing the ssl certificate to yourself and then installing it that way on ios, I am unsure of where I get the routers ssl certificate from to email it to myself.

I did have a quick look in the routers gui but nothing popped out at me except vpn ssl, which I presume is not what I am looking for, then again after having another look at it, maybe it is what I am looking for ?

I only know how to do with chrome, hope your browser has similar structures. First, I access router WebUI with HTTPS, accept the warning, then at the icon and warning that says not secure(left side of where you enter URL), click on that, then Details, then View Certificate on the popup on the right, then Details on the tab, Copy to File.., export as DER, send that to a device to try.

When I use Windows, I used MMC to import router's certificate to device, but importing using chrome might also work. After importing, you need to close, and reopen browser again. To see if you have successfully import certificate is by checking if it no longer show popup about invalid certificate, and you have green lock icon on the left of router's URL.

 

[E.S]

Great, thanks for the walkthrough.

I will try this on wednesday when I have sometime and will post the results.

Thanks again Wutikorn.

 

[E.S]

I tried your suggestion and it doesnt work

It doesnt get as far as loading the website, they error out on a blank screen and say error loading etc and the padlock icon never shows up.

Basically whats happening is for whatever reason its not connecting when set to https.

I set auth to both just to make sure I could get back into the router and then I typed url for router and pushed enter and all browsers errored out and just would not connect, so I did not get as far as you did. I should add I was trying it on ios.

I am using ios, it worked flawlessly previously, and its ios that I really need it to work on.

I can access the router in https mode via my pc, but it will still crap out alot, but I can still access it, its just that I need it to work on my ipad or iphone when away from the pc.

 

[Wutikorn]

I tried your suggestion and it doesnt work

It doesnt get as far as loading the website, they error out on a blank screen and say error loading etc and the padlock icon never shows up.

Basically whats happening is for whatever reason its not connecting when set to https.

I set auth to both just to make sure I could get back into the router and then I typed https://192 blah blah blah and pushed enter and all browsers errored out and just would not connect, so I did not get as far as you did. I should add I was trying it on ios.

I am using ios, it worked flawlessly previously, and its ios that I really need it to work on.

I can access the router in https mode via my pc, but it will still crap out alot, but I can still access it, its just that I need it to work on my ipad or iphone when away from the pc.

The last time I used iPad to access WebUI was probably on 380.64, and now I am on 380.65 Beta 1, I will try to access WebUI tonight with iPad to check if it still works and will let you know after updating to Beta 4 or stable version as well. Btw, I use Google Chrome on my iPad to access, are you using the same browser?

Edit: Since 380.61,the first Merlin's firmware I used, HTTPS never worked properly without importing certificate. Does your iOS phone no longer pop-up invalid certificate alert? What error message do you get?

 

[E.S]

I tried safari and chrome and adlblock browser, i think ive also tried firefox aswell, but not tonight i didnt. This is on latest ios 10 .

I tried opening ports 8443, tried directly connecting via my external ip, also tried using https://router.asus.com:8443/

Page just dont seem to load under https.

 

[florid]

The error message on iOS safari says 'a problem repeatedly occurred on "https://x.x.x:8443/Main_Login.asp"'
I can see the padlock show up but keep refreshing, then finally to the error message.

 

[florid]

I enabled safari web inspector and connected to Mac safari, chose agent type iOS 10 iPhone. Can access the page after click continue of certificate warning. On the web console only see one unexpected CSS code error.

But on iPhone side, still no luck to load the page. No idea how to debug on iPhone directly.

 

[jernau]

You haven't got IPV6 enabled have you? I've also found this issue that I cannot login after switching to https and i wasn't sure if there was any connection with having IPv6 enabled

 

[Iwakan]

iOS updated to 10.3 and problem persists. I don't know if the problem is on Apple or Asus side but seems that never will be fixed.

 

[sdmf74]

So whats the consensus then, just leave authentication method set to HTTP or BOTH? and is it still secure if its left set to HTTP?
Newbie here just got an Asus AC1300 FW 7485 couple days ago and trying to figure out why it says "not secure" in address bar

 

[Iwakan]

Fixed in iOS 11