Diversion Issues with Diversion Pixelserv-tls - Can't get Pad Lock on WebUI

[Chewie420]

Hi so I thought I had pixelserv-tls running and working this whole time but I notice that I do not have a pad lock when I go to my WebUI.

I am running the latest diversion and have configured pixelserv-tls as I thought it should be.
I get ads blocked when I test but when I access router.asus.com I do not get pad lock after running ps command and doing the config.

I have both HTTP and HTTPS WebUI access allowed on LAN only and I have.
I can't access https://router.asus.com either but not sure that would work anyway.

I have also imported the .cert but not on a clean client. Not sure what I have done wrong or if I even need it but it said I should see a pad lock and I don't so I don't know what to do next.

Can anyone help?

 

[dave14305]

What do you get if you access https://router.asus.com:8443/

 

[Andy1932]

I could be misunderstanding, but these are the instructions for testing pixelserv:

 To test if your device works with the certificate, open https://diversion-adblocking-ip.address in a browser. You may have to reload the page a couple of times to get the secure padlock icon.

 

[thelonelycoder]

Hi so I thought I had pixelserv-tls running and working this whole time but I notice that I do not have a pad lock when I go to my WebUI.

I could be misunderstanding, but these are the instructions for testing pixelserv:

 To test if your device works with the certificate, open https://diversion-adblocking-ip.address in a browser. You may have to reload the page a couple of times to get the secure padlock icon.

The https://diversion-adblocking-ip.address link only tests the successful importing of the pixelserv-tls certificate into the browser or OS, depending on what browser one uses.

To use the pixelserv-tls certificate for the routers WebUI in https mode, one has to go through the setup procedure by running the amtm ps function.

 

[Chewie420]

What do you get if you access https://router.asus.com:8443/

Hi thanks for your question but I get ...

Warning: Potential Security Risk Ahead

Firefox detected a potential security threat and did not continue to router.asus.com. If you visit this site, attackers could try to steal information like your passwords, emails, or credit card details.

What can you do about it?

The issue is most likely with the website, and there is nothing you can do to resolve it. You can notify the website’s administrator about the problem.

 

[Chewie420]

The https://diversion-adblocking-ip.address link only tests the successful importing of the pixelserv-tls certificate into the browser or OS, depending on what browser one uses.

To use the pixelserv-tls certificate for the routers WebUI in https mode, one has to go through the setup procedure by running the amtm ps function.

I ran the amtm ps function and still having issues so not quite sure what I did wrong.

After looking at my settings I might have found the issue but not sure how to resolve it. I see that my cert is

Issued by :

Let's Encrypt Authority X3

That doesn't seem right to me but I could be wrong. Any advise?

 

[Chewie420]

The https://diversion-adblocking-ip.address link only tests the successful importing of the pixelserv-tls certificate into the browser or OS, depending on what browser one uses.

To use the pixelserv-tls certificate for the routers WebUI in https mode, one has to go through the setup procedure by running the amtm ps function.

Ok so I re-ran the ps command and fixed the above issue but still not pad lock when I try to access WebUI.

Is it ok that I am using the No-IP.org service for my DNS or should I be using the Asus one?

 

[Chewie420]

Just wanted to ask my question again as I still can't get it working. Does it matter that I am using no-ip.org for my DNS to get pixelservitls to give the the pad lock on the web UI like I am trying to get.

 

[Chewie420]

Anyone able to assist, not sure what I am doing wrong.

 

[dave14305]

Anyone able to assist, not sure what I am doing wrong.

Browse to http://192.168.5.2/ca.crt and follow the instructions to import: https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate#firefox

 

[Chewie420]

Browse to http://192.168.5.2/ca.crt and follow the instructions to import: https://github.com/kvic-z/pixelserv-tls/wiki/Create-and-Import-the-CA-Certificate#firefox

I have completed the steps and still have the same results.

 

[Chewie420]

This server could not prove that it is 192.168.5.1; its security certificate is from router.asus.com. This may be caused by a misconfiguration or an attacker intercepting your connection.

 

[dave14305]

I have completed the steps and still have the same results.

Browse to https://router.asus.com:8443/ instead.

 

[Chewie420]

Browse to https://router.asus.com:8443/ instead.

Still same issue

 

[Chewie420]

Ah works in Chrome but not Firefox? Any reason for that?

 

[dave14305]

Ah works in Chrome but not Firefox? Any reason for that?

Make sure you trust it to identify websites when importing. Or delete it and try again (aboutreferences#privacy then View Certificates / Authorities then scroll down to Pixelserv and Delete or just Edit Trust to match below).

 

[Chewie420]

Make sure you trust it to identify websites when importing. Or delete it and try again (aboutreferences#privacy then View Certificates / Authorities then scroll down to Pixelserv and Delete or just Edit Trust to match below).

View attachment 27071

View attachment 27072

Working now! Thanks so much for your time!