HTTPS/SSL CERTIFICATE SETTINGS

[Darcy]

Which is the best to use? Under WAN/DDNS I have mine set at none. Is that safe or should I be using one of the other two settings? Let’s encrypt or import/persistent auto generated are the other choices. I have an 86U running FW 384.7 Alpha 2 by Merlin. Thanks for any help. I don’t run vpn or anything special if that helps.


Sent from my iPhone using Tapatalk

 

[bubobih]

I cant use lets encrypt idk why... and nobody help me here... so try to use custom ssl if u know how to setup

 

[Zastoff]

Before i used import/persistent auto generated CA for DDNS
But now i use a CA from pixelserv-tls as explained here: https://github.com/kvic-z/pixelserv-tls/wiki/[ASUSWRT]-Use-Pixelserv-CA-to-issue-a-certificate-for-WebGUI

I would use Let’s encrypt or a Pixelserv-tls CA if possible

Edit: https://www.sslshopper.com/why-ssl-the-purpose-of-using-ssl-certificates.html

 

[Darcy]

I appreciate the couple of responses. So keeping my setting at none is not good I suppose?


Sent from my iPhone using Tapatalk

 

[bubobih]

Can someone explane how to get ssl working im not so expert for this.

 

[john9527]

Just a reminder for another option.....XCA (it's the one I use)
https://www.snbforums.com/threads/tool-to-manage-your-own-certificate-authority.45062/

 

[Darcy]

I don’t know how to do any of that. I appreciate you sharing a different way though. Out of the 3 choices I spoke of which is the best option. Right now I have none checked off


Sent from my iPhone using Tapatalk

 

[Darcy]

Still not sure what to do here.


Sent from my iPhone using Tapatalk