Merlin + entware + owncloud + lighttpd with https (solved)

[Carlos M.]

Hi all,

I'm finally geting under control my N66u with Merlin and installing some functions.
With owncloud everything looks nice but I need to set up SSL access (https) to the web gui.

I have been looking for info in this forum but no luck.

Please, could you explain how can I configure my server to force https and use a selfsigned certificate?

I used this tutorial but don't explain the last steps.

https://www.hqt.ro/owncloud-through-lighttpd-entware/

Thanks in advance

 

[Carlos M.]

Hi, while somebody answer my question... I found the way to activate HTTPS access.

This example will create a cert which is valid for 3 years:

mkdir -p /etc/lighttpd/certs
cd /etc/lighttpd/certs
openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 1095 -nodes

With the terminal, fill in the gaps:

Country Name (2 letter code) [AU]:ZZ
State or Province Name (full name) [Some-State]:Sunny-Place
Locality Name (eg, city) []:Nice-Town
Organization Name (eg, company) [Internet Widgits Pty Ltd]:private
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:your servername here
Email Address []:

Make sure the file can't be read by enyone except root:

chmod 400 lighttpd.pem

edit /etc/lighttpd/lighttpd.conf and add the following lines:

$SERVER["socket"] == ":443" {
    ssl.engine = "enable"
    ssl.pemfile = "/etc/lighttpd/certs/lighttpd.pem"

    # enforce strong cypher
    ssl.use-sslv2 = "disable"
    ssl.cipher-list = "TLSv1+HIGH !SSLv2 RC4+MEDIUM !aNULL !eNULL !3DES @STRENGTH"
}

$HTTP["scheme"] == "http" {
    # capture vhost name with regex conditiona -> %0 in redirect pattern
    # must be the most inner block to the redirect rule
    # enable if you want to "enforce" https
    #$HTTP["host"] == "your servername here" {url.redirect = (".*" => "https://%0$0")}
}

Restart web server to honor new config:

/opt/etc/init.d/S80lighttpd restart

Source:

https://forum.owncloud.org/viewtopic.php?t=20358

Now I just need find the way to access from WAN with DDNS any idea?

 

[TeHashX]

Hi, while somebody answer my question... I found the way to activate HTTPS access.

This example will create a cert which is valid for 3 years:

mkdir -p /etc/lighttpd/certs
cd /etc/lighttpd/certs
openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 1095 -nodes

With the terminal, fill in the gaps:

Country Name (2 letter code) [AU]:ZZ
State or Province Name (full name) [Some-State]:Sunny-Place
Locality Name (eg, city) []:Nice-Town
Organization Name (eg, company) [Internet Widgits Pty Ltd]:private
Organizational Unit Name (eg, section) []:
Common Name (e.g. server FQDN or YOUR name) []:your servername here
Email Address []:

Make sure the file can't be read by enyone except root:

chmod 400 lighttpd.pem

edit /etc/lighttpd/lighttpd.conf and add the following lines:

$SERVER["socket"] == ":443" {
    ssl.engine = "enable"
    ssl.pemfile = "/etc/lighttpd/certs/lighttpd.pem"

    # enforce strong cypher
    ssl.use-sslv2 = "disable"
    ssl.cipher-list = "TLSv1+HIGH !SSLv2 RC4+MEDIUM !aNULL !eNULL !3DES @STRENGTH"
}

$HTTP["scheme"] == "http" {
    # capture vhost name with regex conditiona -> %0 in redirect pattern
    # must be the most inner block to the redirect rule
    # enable if you want to "enforce" https
    #$HTTP["host"] == "your servername here" {url.redirect = (".*" => "https://%0$0")}
}

Restart web server to honor new config:

/opt/etc/init.d/S80lighttpd restart

Source:

https://forum.owncloud.org/viewtopic.php?t=20358

Now I just need find the way to access from WAN with DDNS any idea?

https://ddnsaddress/owncloud

 

[Carlos M.]

thanks, just remark that editing before the config.php file of owncloud and adding the ddnsaddress as a trusted domain.

 

[Daniel Hansson]

You could just use the Snakeoil certs if you are on Ubuntu.

EDIT: Oh, you're on LightHTTPD.

 

[Carlos M.]

I left my owncloud project with my Asus router. I moved to Raspberry Pi 2, Debian, Apache, MySQL, ARM and 1Gb of RAM
Faster...

Thanks

 

[Daniel Hansson]

You should visit https://www.techandme.se if you want some ownCloud guides, and tips and tricks.

 

[Carlos M.]

You should visit https://www.techandme.se if you want some ownCloud guides, and tips and tricks.

Thanks Daniel, looks great. I'll investigate