Web GUI shows site not secure

[Chewie420]

I have the RT-AX88U Router with Merlin installed. I have never been able to get the "not secure" message in address bar to go away. I am using a DDNS with no-ip.org.

From the WAN - DDNS setting page in the Webui SSL Certificate section I have selected "Free Certificate from Let's Encrypt"

I export the file and when I extract the files I have a cert.pem and key.pem

From the directions on this tutorial I should be able to install but I am not getting a cert file that can be insatlled.

Not sure how to resolve this and Asus support doesn't seem to know how to help. Thought I would try on here.

 

[Tech9]

This?

What is there to secure so much on Web GUI access from LAN?

Is Web Access from WAN enabled on your router? If it is - disable. Security risk.

 

[Chewie420]

Sorry I’m not sure what you are asking?

Access from WAN is disabled

 

[Tech9]

Not sure how to resolve

You have nothing to resolve. You don't really need HTTPS access to your Web GUI from your LAN.

 

[Ripshod]

It's understandable. The letsencrypt certificate is for your no-ip domain, nothing else. If you really want to chase this one then you can set your lan domain to match the no-ip domain and use the domain to access the router, or add an exception in your browser.
Really though, as @Tech9 points out, there's really no need to use ssl on your private network.

 

[Chewie420]

It's understandable. The letsencrypt certificate is for your no-ip domain, nothing else. If you really want to chase this one then you can set your lan domain to match the no-ip domain and use the domain to access the router, or add an exception in your browser.
Really though, as @Tech9 points out, there's really no need to use ssl on your private network.

Oh ok thanks for the info. I just didn’t know why it wasn’t working.

If I wanted to change my lan domain to the no-op where do I do that?

 

[Ripshod]

In the LAN settings:

Also in the admin settings I've enabled https access, so to access my router locally I use

https://XXXXXXX.ddns.net:8443

No need to export keys.

 

[Tech9]

No need to do that either.