On 31/07/2020 23.11, mike wrote:
Hello,
Ok so I have no idea what Im doing on this so I thought I should ask someone here.
When I logged into the router I was warned it is insecure and someone could read what I
was writing and I should make it secure. So I found out I could not log in with https. I checked
on this and found out I would need a cert...not a self signed cert. This is where the trouble
started as I found out the self signed cert I used was unusable. The other things are I can dual
boot with win 10 or TW. Also I have two routers. The one from the ISP and another plugged
into that. Now first do I need to set this up with cert security? Second do I need this at all?
I got the a cert from asus (as in the router). If anyone can give me some hints or directions on
how to do this. .................. if I'm not making any sense let me know....
Quick answer: you do not need anything. Also, possibly you can not do anything. Question: are you logging to your router from your internal network? If so, forget the warning about an insecure connection. The bad guys must connect to your internal network first, which probably means that they have to get inside first, and if they do, who cares about the router? Of course, it means that your WiFi, if you have it, must be secured. Then, can you do anything anyway? No. The routers doesn't have a hard disk where you can write software modifications. It has a ROM that can be flashed with another firmware, and that road is not easy. (you would have to install the cert on the router, and modify its web server so that it responds on https. Not easy. The only practical way to do it is get an alternative firmware and install it, if feasible. I do not recommend it.) If the answer to my question is that you log into the router via internet and http, then... don't do that. Ever. Find out if the router has ssh and use it instead. Then go into the router configuration and disable external http port. And perhaps some other possibilities. -- Cheers / Saludos, Carlos E. R. (from 15.1 x86_64 at Telcontar)