can i install the certificate that i make with openssl, to the devices, so the certificate error will be removed, when they entering the hotspot?
or they will continue see the message?
Yes you can.
However https will never work correct 100% in a hotspot system…
You can make the key and the csr with openssl, then have it signed by a trusted certificate issuer, and then you install the certificate they return to you (and its key).
You cannot do the entire process with openssl (including generating the cert) because your users will get errors indicating that the certificate is invalid (self signed, not issued by trusted party).
so if i buy one, trusted certificate, will it work?
You can buy a certificate only for an existing, valid domain name.
hmmm , if i use no-ip and lets encrypt will it work?
Probably not. They very likely do not issue certifcates for that.
When you cannot shell out the $10/year or so for a valid domain name, just forget about the whole thing.
No it won’t work.
ok i will probably get a domain name and a ssl.
it doesnt cost a lot 20 euros all together
thank you for the answers!!
When you are clever you can get the letsencrypt certificate for free. However, it requires some special tricks, for which you need a webserver that you can configure to serve that account.
Then you can get the certificate for that and copy it to the router. This has to be repeated every 3 months.
When you get a paid certificate this is not required and it is valid for a year.
As far as i know, even free certificates require a valid domain..!
Indeed, but he could save $10 by using a valid domain in combination with a free certificate.
As fas as I know, MikroTik routers can’t yet apply for (and renew) a letsencrypt certificate, so that would require a separate system (e.g. a Raspberry Pi) and it would require some clever automation to update it in the router after it has been renewed.
With limited knowledge and/or resources available it could be easier to get a paid certificate and install that on the router, as this has to be done only once per year.
Before you start buying anything, check also my answer in your other thread (and next time maybe keep everything in one). Just to be sure that the certificate will actually help you.
Btw, quick Google search suggests that dynamic no-ip hostnames should work just fine with LE.