Community discussions

MikroTik App
 
munsell
just joined
Topic Author
Posts: 4
Joined: Tue Jul 22, 2008 6:27 pm

Need help installing a SSL Certificate

Tue Jul 22, 2008 8:26 pm

Hi,
I recently installed RouterOs on a dedicated PC to run UserManager. So of course in order to make this a secure connection for our users, we need an SSL certificate. I recently purchased a signed certificate from godaddy.com however I can't figure out how to install it on to the actual router/pc.
Any help would be wonderful,
Thanks
Munsell
 
SurferTim
Forum Guru
Forum Guru
Posts: 4637
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: Need help installing a SSL Certificate

Tue Jul 22, 2008 11:18 pm

Greetings!

I have not worked with GoDaddy, but normally you need to generate a key request on your server, send it to your SSL authority (GoDaddy for you), and they send you a key certificate which you import to your server.

The instructions are in the docs under Certificates.
http://www.mikrotik.com/testdocs/ros/2. ... ficate.php

BTW, let me know how it goes with GoDaddy. The price looks much better than what I paid last time.
 
alphastate
just joined
Posts: 23
Joined: Sat Jul 19, 2008 12:54 am

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 2:53 am

When you get the certificate, you have to copy some files (server.crt, server.key, and server.csr) to the RouterOS right? You use FTP to upload them, but what directory do you upload them to? or does it matter?
 
User avatar
maximan
Trainer
Trainer
Posts: 549
Joined: Sat May 29, 2004 12:10 am
Location: Rio Cuarto, Argentina
Contact:

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 3:13 am

There are an example on the wiki.


Max
http://mikrotikexpert.com
http://maxid.com.ar
MKE Solutions > Professional Support IT (Spanish / English)
FastNetMon / FNM Manager: DDoS Detection Tools.
 
SurferTim
Forum Guru
Forum Guru
Posts: 4637
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 2:11 pm

I use my ssl on my Linux x86 box, but it should not be that different in the MT boxes.
The files should be relative to the root directory. You can probably put them in the main ftp directory, but I would try creating a /ssl directory and putting them in there. Then you should be able to use standard Linux file references to them, just start files with "ssl/filename.ext" in the certificate install.

maximan: I found no ssl instructions in the wiki. Can you or someone give me a hand with a link?
 
tyronzn
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Thu May 24, 2007 4:55 pm
Location: Durban,South Africa
Contact:

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 3:28 pm

copy the certificates in the root file,then click on certificates in winbox and click import,the files will pop up.cant recall
in what order you need to import them in but it says clearly on the wiki
 
munsell
just joined
Topic Author
Posts: 4
Joined: Tue Jul 22, 2008 6:27 pm

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 4:29 pm

Okay so I already knew most of that. My problem now is that i have the certificate sitting on my XP computer and can't figure out the syntax in cmd to upload the certificate to our remote server.
Thanks
 
lagosta
just joined
Posts: 21
Joined: Sun May 11, 2008 10:02 pm

Re: Need help installing a SSL Certificate

Wed Jul 23, 2008 7:29 pm

Were is the wiki tutorial on this matter? I can't seem to find it.
 
SurferTim
Forum Guru
Forum Guru
Posts: 4637
Joined: Mon Jan 07, 2008 10:31 pm
Location: Miramar Beach, Florida

Re: Need help installing a SSL Certificate

Thu Jul 24, 2008 12:05 am

Hi munsell,

Doesn't seem to be a problem with Internet Explorer/Windows Explorer. I just uploaded a couple of test text files with it into my RB433. In the address bar of IE:
ftp://xxx.xxx.xxx.xxx
It should ask for a user/password. To upload anything, I had to open the ftp site in Windows Explorer. To do that in my version, it is under "Page" on the menu bar.
Then it is "copy and paste" time! Highlight the filename, right-click on the highlight, and click "copy". Then paste into the MT box window.

BTW, the user/password is sent unencrypted. Just so ya know.
 
User avatar
maximan
Trainer
Trainer
Posts: 549
Joined: Sat May 29, 2004 12:10 am
Location: Rio Cuarto, Argentina
Contact:

Re: Need help installing a SSL Certificate

Thu Jul 24, 2008 1:21 am

MKE Solutions > Professional Support IT (Spanish / English)
FastNetMon / FNM Manager: DDoS Detection Tools.
 
tyronzn
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Thu May 24, 2007 4:55 pm
Location: Durban,South Africa
Contact:

Re: Need help installing a SSL Certificate

Thu Jul 24, 2008 9:42 am

or you can right click on the files and click "copy",open up winbox and click on the "files" button.Within files,click on the "paste" button.Once that is done the files are copied onto the board and ready for import.
 
alphastate
just joined
Posts: 23
Joined: Sat Jul 19, 2008 12:54 am

Re: Need help installing a SSL Certificate

Fri Jul 25, 2008 12:29 am

I don't have a Linux box lying around to generate certificates on using OpenSSL. Is there any other way to get a certificate without paying a wad of cash?
 
tyronzn
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Thu May 24, 2007 4:55 pm
Location: Durban,South Africa
Contact:

Re: Need help installing a SSL Certificate

Fri Jul 25, 2008 9:55 am

just download a linux distribution (they all live cd's) .Then boot up with it on your windows machine, and create the certificate.Mount onto a flash drive or upload directly onto the routerboard

Who is online

Users browsing this forum: cifzo, guycobb2, wichets, yan2x and 28 guests