How do you set the WebFig interface to use https (443) instead of port 80?
I guess you need to enable https in /ip services and disable http.
This will affect all web-based interfaces.
I guess you also have to insert some kind of certificate.
Yes, but it can be a self-signed cetificate, and as far as I remember it can be generated directly on the RB.
I don’t have access to any of my RB right now, so I’m bot able to test it.
Use search function on the forum…
http://forum.mikrotik.com/t/https-problem-on-hotspot/74093/6
Me? What for? It’s on the wiki I guess and rcampbell can check it by himself.
Sorry, the mesasge is for rcampbell
Thanks for the help guys.
I had previously searched both the forums and the Wiki and didn’t get a clear answer without dropping to command line. Hopefuly other people that are new to RouterOS will find this useful.
First off there seems to be a bug in WebFig so I had to use WinBox.
The bug can be found here - WebFig - System - Certificates - [Select your certificate] - Sign. The sign button doesn’t work in WebFig (I tried Chrome, IE 11 in Normal and Compatibility Mode) so I used WinBox. Everything else can be done in WebFig except the ‘Sign’ button.
Step 1. Create a Certificate
-System - Certificates - ‘+’
-Create a name ‘ssl-web-management’ or whatever you like
-Country = US (or the two letter country code you want)
-Thats all we need for the self signed cert
-Click ‘Sign’
-Click ‘Sign’ again on the popup dialog (you can leave CA as unknown)
-Click OK
The certificate should now be created and trusted.
Step 2. Enable Port 443 for management and assign the cert
-IP - Services
-Double click on ‘www-ssl 443’
-On the pop up dialog select the certificate you created
-Click ‘Enable’ to enable 443 web management
-Click ‘OK’
You should be able to browse to WebFig on port 443 now.
I Did that all steps but didn’t disable 80 port.
After that all I just tried to go to https:/192.168.1.1 (router) but I got
Kod błędu: ERR_SSL_VERSION_OR_CIPHER_MISMATCH
What key usage must be set?
I have set on:
-digital signature
-key encipherment
-ctrl sign
-data encipherment
-key cert. sign
-tls server
what option s required for https, anything else should be set ?
should I add anything to firewall ?
webfig on port 80 is still working properly.
Thank you @rcampbell for pointing out that thing with broken “sign” button!
It’s like 6 months after your post and it’s still not fixed. I’m new to MikroTik and that’s not the fist impression I was hoping for.