What's new

pixelserv im going nuts!!!

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

fearz

Senior Member
When using pixelserv

it says go to http:/192.168.2.4/ca.crt - i cannot download this file!!

just loading
i tried internet downoad managers...just wont work download!!!

Why the hell is that?
 
Is pixelserv running?

Why are you creating so many threads for the same issues around your certificates? Hard to follow...
 
If the file is there, it will be under /opt/var/cache/pixelserv/ca.crt.

The easiest way to get Pixelserv to create your certificate is to install Diversion Standard. Then follow the Pixelserv wiki for importing the cert

Then follow the Pixelserv wiki to create a cert for the WebUI:
 
If the file is there, it will be under /opt/var/cache/pixelserv/ca.crt.

The easiest way to get Pixelserv to create your certificate is to install Diversion Standard. Then follow the Pixelserv wiki for importing the cert

Then follow the Pixelserv wiki to create a cert for the WebUI:
i installed pixelserv via diversion,but still neither 192.168.2.1 nor router.asus.com re secured...
and still after installation it says go to http://192168.2.24/ca.crt

when i go there, it doesnt download the file....just a blank plage
 
Also , I need help after obtaining the right .crt files, how to importat it in windows and in browsers,,,
is reallt appreciate your help...
 

They put the instructions on this page


When i follow this, i ge the following erorr:


fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# mkdir -p /opt/var/cache/pixelserv
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# cd /opt/var/cache/pixelserv
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl genrsa -out ca.key 1024
Generating RSA private key, 1024 bit long modulus (2 primes)
........................................................................+++++
..............+++++
e is 65537 (0x010001)
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
Error Loading extension section v3_ca
1024:error:22097069:lib(34):func(151):reason(105):NA:0:name=subjectAltName,section=@alt_names
1024:error:22098080:lib(34):func(152):reason(128):NA:0:name=subjectAltName, value=@alt_names
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# chown -R nobody /opt/var/cache/pixelserv
 
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
Error Loading extension section v3_ca
1024:error:22097069:lib(34):func(151):reason(105):NA:0:name=subjectAltName,section=@alt_names
1024:error:22098080:lib(34):func(152):reason(128):NA:0:name=subjectAltName, value=@alt_names
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# chown -R nobody /opt/var/cache/pixelserv

Whats this error?
 
From what I can tell is , you now need to reinstall diversion, or use diversion to recreate your Certificate repository. Diversion by default already makes this directory for you. It looks like you are attempting to make this directory yourself. Basically you are doing too many steps and at this point it is hard to follow where you are getting stuck at.
 

They put the instructions on this page
The only instructions you are suppose to follow on this page is How to Import your certificate section....
Import Pixelserv CA on client devices

Importing your CA cert on clients is not mandatory but recommended. Your Pixelserv CA cert is available through URL http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.


iOS/Android


The following procedure will import your CA cert and trust it system wide.


  • Open Safari/Chrome. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
  • Follow the prompt to finish the installation.

CAUTION


Since iOS 10.3, a user-installed CA cert requires enabling trust explicitly.


  • Go to Settings > General About > Certificate Trust Settings.
  • Under Enable full trust for root certificates, turn on trust for Pixelserv CA.

This tip is provided by @jrmwvu04 on snbforums.


Firefox


Firefox manages its own root CA certificates. The import procedure is same on all platforms.


  1. Open your browser and visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
  2. Select "Trust this CA to identify websites" on the screen pop-up.
  3. Click "Ok"

macOS: Safari/Chrome


The following procedure will import your CA cert and trust it system wide.


  1. Open Safari/Chrome. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
  2. Find the downloaded file, ca.crt.
  3. Double click on `ca.crt' to start Keychain's import wizard.
  4. Select keychain "system" and click "Add".
  5. Open Keychain Access and select keychain "System".
  6. Locate "Pixelserv CA" and double click to the CA cert.
  7. Expand "Trust" and select "Always Trust" for "When using this certificate"
  8. Close the window to finish setting update.

Restart your browser to take effect.


Windows: Chrome/Edge/IE


The follow procedure will import your CA cert and trust it system wide.


  1. Open your browser. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
  2. Find the downloaded file, ca.crt.
  3. Double click on `ca.crt' to view the certificate.
  4. Click "Install Certificate.." and select "Local Machine".
  5. Click "Place all certificate in the following store" on next screen.
  6. Click "Browse..." and select "Trusted Root Certification Authorities".
  7. Click "Next" and then "Finish" on next screen.

Restart browser to take effect.


If the above steps do not work for you, please follow this Windows guide to use MMC for import.


Others

You may follow this guide for ChromeOS, and this one for Linux in general.


Pages 13




Clone this wiki locally
 

Support SNBForums w/ Amazon

If you'd like to support SNBForums, just use this link and buy anything on Amazon. Thanks!

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top