dnsomatic and ssl

[Perry Rhodan]

I've searched here and reviewed the changelog file and can't seem to locate this information.

When ever my router updates my IP on dnsomatic the log entry below seems to indicate the connection was over port 80, is this just a typo or are the connections not encrypted?

connected to updates.dnsomatic.com (67.215.92.215) on port 80.

 

[Zirescu]

Near as I can tell it is using the default port 80 when using the Web UI. You could use the Custom Script option and the following custom dns-o-matic script to do updates over https.

 

[Perry Rhodan]

I figured I could use the custom script, it's just since the service is in the list it would make sense it would use ssl out of the box. Else it's a serious security issue.

 

[RMerlin]

I figured I could use the custom script, it's just since the service is in the list it would make sense it would use ssl out of the box. Else it's a serious security issue.

Unfortunately, the dynamic dns client Asus uses is prehistoric, and never had SSL support implemented before it was abandoned by the original developers.

I can't just change that client, that would require for me to re-implement every DDNS that Asuswrt currently supports and that wouldn't be supported by a new client, such as Asus's own DDNS. That's something I don't have the time to work on, sorry. That's one of the reasons why I came up with a custom script implementation, so people can roll their own implementation as needed.

 

[Perry Rhodan]

Merci Eric!

Yes I understand the effort required to maintain DDNS outside the ASUS realm would be unsustainable. I'll look at using a custom script, or carry on paying for a static IP with my ISP. Just can't justify the risk on using http as sending non-encrypted credentials is looking for trouble...

 

[steelskinz]

If you suceed with dns o matic and ssl could you post a tutorial ? Could be interesting to know and share ! Thank !

 

[Zirescu]

If you suceed with dns o matic and ssl could you post a tutorial ? Could be interesting to know and share ! Thank !

#2

 

[steelskinz]

Thanks !

 

[steelskinz]

Got "request error!" even if i put my opendns name display (as advice for dnsomatic).