pixelserv im going nuts!!!

[fearz]

When using pixelserv

it says go to http:/192.168.2.4/ca.crt - i cannot download this file!!

just loading
i tried internet downoad managers...just wont work download!!!

Why the hell is that?

 

[dave14305]

Is pixelserv running?

Why are you creating so many threads for the same issues around your certificates? Hard to follow...

 

[fearz]

Is pixelserv running?

Why are you creating so many threads for the same issues around your certificates? Hard to follow...

Sorry didferent issues...

Apologies,

Im trying to explain everything as much as possible...

 

[dave14305]

If the file is there, it will be under /opt/var/cache/pixelserv/ca.crt.

The easiest way to get Pixelserv to create your certificate is to install Diversion Standard. Then follow the Pixelserv wiki for importing the cert

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

Then follow the Pixelserv wiki to create a cert for the WebUI:

[ASUSWRT] Use Pixelserv CA to issue a certificate for WebGUI

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

 

[fearz]

If the file is there, it will be under /opt/var/cache/pixelserv/ca.crt.

The easiest way to get Pixelserv to create your certificate is to install Diversion Standard. Then follow the Pixelserv wiki for importing the cert

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

Then follow the Pixelserv wiki to create a cert for the WebUI:

[ASUSWRT] Use Pixelserv CA to issue a certificate for WebGUI

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

i installed pixelserv via diversion,but still neither 192.168.2.1 nor router.asus.com re secured...
and still after installation it says go to http://192168.2.24/ca.crt

when i go there, it doesnt download the file....just a blank plage

 

[fearz]

Also , I need help after obtaining the right .crt files, how to importat it in windows and in browsers,,,
is reallt appreciate your help...

 

[SomeWhereOverTheRainBow]

Also , I need help after obtaining the right .crt files, how to importat it in windows and in browsers,,,
is reallt appreciate your help...

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

They put the instructions on this page

 

[fearz]

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

They put the instructions on this page

When i follow this, i ge the following erorr:


fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# mkdir -p /opt/var/cache/pixelserv
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# cd /opt/var/cache/pixelserv
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl genrsa -out ca.key 1024
Generating RSA private key, 1024 bit long modulus (2 primes)
........................................................................+++++
..............+++++
e is 65537 (0x010001)
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
Error Loading extension section v3_ca
1024:error:22097069:lib(34):func(151):reason(105):NA:0:name=subjectAltName,section=@alt_names
1024:error:22098080:lib(34):func(152):reason(128):NA:0:name=subjectAltName, value=@alt_names
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# chown -R nobody /opt/var/cache/pixelserv

 

[fearz]

fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# openssl req -key ca.key -new -x509 -days 3650 -sha256 -extensions v3_ca -out ca.crt -subj "/CN=Pixelserv CA"
Error Loading extension section v3_ca
1024:error:22097069:lib(34):func(151):reason(105):NA:0:name=subjectAltName,section=@alt_names
1024:error:22098080:lib(34):func(152):reason(128):NA:0:name=subjectAltName, value=@alt_names
fearz@RT-AC5300-7DC0:/tmp/mnt/sda1/entware/var/cache/pixelserv# chown -R nobody /opt/var/cache/pixelserv

Whats this error?

 

[fearz]

Anyone?

 

[SomeWhereOverTheRainBow]

Anyone?

From what I can tell is , you now need to reinstall diversion, or use diversion to recreate your Certificate repository. Diversion by default already makes this directory for you. It looks like you are attempting to make this directory yourself. Basically you are doing too many steps and at this point it is hard to follow where you are getting stuck at.

 

[SomeWhereOverTheRainBow]

Create and Import the CA Certificate

A tiny bespoke HTTP/1.1 server for adblock and accelerating web browsing. - kvic-z/pixelserv-tls

github.com

They put the instructions on this page

The only instructions you are suppose to follow on this page is How to Import your certificate section....
Import Pixelserv CA on client devices

Importing your CA cert on clients is not mandatory but recommended. Your Pixelserv CA cert is available through URL http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.


iOS/Android

The following procedure will import your CA cert and trust it system wide.

• Open Safari/Chrome. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
• Follow the prompt to finish the installation.

CAUTION


Since iOS 10.3, a user-installed CA cert requires enabling trust explicitly.

• Go to Settings > General About > Certificate Trust Settings.
• Under Enable full trust for root certificates, turn on trust for Pixelserv CA.

This tip is provided by @jrmwvu04 on snbforums.


Firefox

Firefox manages its own root CA certificates. The import procedure is same on all platforms.

1. Open your browser and visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
2. Select "Trust this CA to identify websites" on the screen pop-up.
3. Click "Ok"

macOS: Safari/Chrome

The following procedure will import your CA cert and trust it system wide.

1. Open Safari/Chrome. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
2. Find the downloaded file, ca.crt.
3. Double click on `ca.crt' to start Keychain's import wizard.
4. Select keychain "system" and click "Add".
5. Open Keychain Access and select keychain "System".
6. Locate "Pixelserv CA" and double click to the CA cert.
7. Expand "Trust" and select "Always Trust" for "When using this certificate"
8. Close the window to finish setting update.

Restart your browser to take effect.


Windows: Chrome/Edge/IE

The follow procedure will import your CA cert and trust it system wide.

1. Open your browser. Visit http://pixelserv ip/ca.crt. Make sure you replace pixelserv ip with the actual IP address of pixelserv.
2. Find the downloaded file, ca.crt.
3. Double click on `ca.crt' to view the certificate.
4. Click "Install Certificate.." and select "Local Machine".
5. Click "Place all certificate in the following store" on next screen.
6. Click "Browse..." and select "Trusted Root Certification Authorities".
7. Click "Next" and then "Finish" on next screen.

Restart browser to take effect.


If the above steps do not work for you, please follow this Windows guide to use MMC for import.


Others
You may follow this guide for ChromeOS, and this one for Linux in general.


Pages 13

• Home
• [ASUSWRT] Use Pixelserv CA to issue a certificate for WebGUI
• [PI‑HOLE] Setup pixelserv‑tls for Pi‑Hole
• Command Line Options
• Create and Import the CA Certificate
• FAQ
• How to best run pixelserv tls on Asuswrt Merlin
• HOW TO: Figure out domain(s) to whitelist on a broken website
• pixelserv‑tls Servstats Page
• Projects Using pixelserv‑tls
• Release notes for version Ki (v35.HZ12.Ki)
• Supported Platforms
• What's new in version Kj (v35.HZ12.Kj)

Clone this wiki locally