on premise website as https

RouterOS Beginner Basics
1

Hi guys just a newbie question

how can I make my on premise web site access as https

is this configurable in mikrotik ? thank you in advance guys

2

HTTPS requires a certificate. A very good (and free) supplier is Let’s Encrypt: https://letsencrypt.org/
Are you referring to a website you are hosting on a server? What is the relation with MikroTik?

3

my webserver is behind mikrotik and this web server is just local. I'm wondering how can other pc also behind the mikrotik router can access my website with https?

4

I prefer to have all my internal run services resolved to the internal (private) IP address.
Let’s assume:

All you have to do is:

  • run a DNS server (MikroTik is running it by default)
  • have all clients resolve through this DNS server only
  • resolve www.clydie.local to 192.168.88.2

Hope this makes sense…still not sure what problem you are currently running into.

5

would it be possible that all infos i entern to the website will be encrypted or secure? even if its internal? that's why I'm asking how to make my internal website use https

6

There is no difference between internally hosted and externally hosted websites when it comes to encryption.
What webserver are you using? Have you tried using Google (or any other preferred search engine) to find out how to enable HTTPS (hint…certificate) on your webserver?

Or are you referring to the MikroTik management site (WebFig)?
Then you can read the help doc: https://help.mikrotik.com/docs/display/ROS/Webfig

7

what i mean is its a on premise web application and its actually being access only by on premise work station also. its in the same bldg. what I want to do is make this web application be secure and encrypted
like making it https everytime the workstations access it. does the mikrotik has something to do with this?

8

No, router has nothing to do with that. It’s webserver like any other. So either configure it as https-only with http disabled (clients will have to type address with https://, unless I missed that some browsers would use https by default), or keep http enabled and configure it to redirect everything to https.

9

[quote=GregoryVenegas post_id=904940 time=1642002363 user_id=188200]
I even not sure about http and https. Can you please explain me about this issue. I’m going to launch my first website soon. Before launching my first website online I would like to ensure about this. Thank you so much!
[/quote]

Could you tell us what is the rule of this webserver?

10

Lets be clear on what you want.
Is it.
A. clients ONLY reach the webserver by internal LANS (behind the router)
B. clients should be able to reach the webserver from both the internal LANS and from the internet (coming from their public IPs and external devices).

The software and type of webserver you are running should have all the requisite ways to ensure that it is encrypted or encryptable (aka require https to access).
I believe that without a trusted certificate installed all your users may get a warning that your server (URL) is an unknown/untrusted entity.

Be advised HTTPS is typically used to protect the username and password used to login to websites.
Just having https in front of an url does not mean the data is necessarily protected. I go onto the web and more and more sites push one over to https type connections, without any login etc… with full access to all the available “front information” If I need some sort of transaction etc. then a login is usually required.

11

Access aside, if you’re asking how to make your web site https only, then this depends what was setup on the server to handle web. Is it IIS on Windows? Is it Apache on CentOS? etc, etc. Either case, you need a certificate to turn something into https or SSL. After the certificate is installed on the server side, then you need to enable appropriate ssl settings on the web app or page which is different between IIS and Apache, etc, etc. Routers have nothing to do with this process.