Hi,
I recently installed RouterOs on a dedicated PC to run UserManager. So of course in order to make this a secure connection for our users, we need an SSL certificate. I recently purchased a signed certificate from godaddy.com however I can't figure out how to install it on to the actual router/pc.
Any help would be wonderful,
Thanks
Munsell

Greetings!

I have not worked with GoDaddy, but normally you need to generate a key request on your server, send it to your SSL authority (GoDaddy for you), and they send you a key certificate which you import to your server.

The instructions are in the docs under Certificates.
http://www.mikrotik.com/testdocs/ros/2. ... ficate.php

BTW, let me know how it goes with GoDaddy. The price looks much better than what I paid last time.

When you get the certificate, you have to copy some files (server.crt, server.key, and server.csr) to the RouterOS right? You use FTP to upload them, but what directory do you upload them to? or does it matter?

There are an example on the wiki.


Max
http://mikrotikexpert.com
http://maxid.com.ar

I use my ssl on my Linux x86 box, but it should not be that different in the MT boxes.
The files should be relative to the root directory. You can probably put them in the main ftp directory, but I would try creating a /ssl directory and putting them in there. Then you should be able to use standard Linux file references to them, just start files with "ssl/filename.ext" in the certificate install.

maximan: I found no ssl instructions in the wiki. Can you or someone give me a hand with a link?

copy the certificates in the root file,then click on certificates in winbox and click import,the files will pop up.cant recall
in what order you need to import them in but it says clearly on the wiki

Okay so I already knew most of that. My problem now is that i have the certificate sitting on my XP computer and can't figure out the syntax in cmd to upload the certificate to our remote server.
Thanks

Were is the wiki tutorial on this matter? I can't seem to find it.

Hi munsell,

Doesn't seem to be a problem with Internet Explorer/Windows Explorer. I just uploaded a couple of test text files with it into my RB433. In the address bar of IE:
ftp://xxx.xxx.xxx.xxx
It should ask for a user/password. To upload anything, I had to open the ftp site in Windows Explorer. To do that in my version, it is under "Page" on the menu bar.
Then it is "copy and paste" time! Highlight the filename, right-click on the highlight, and click "copy". Then paste into the MT box window.

BTW, the user/password is sent unencrypted. Just so ya know.

on this forum here is:

http://forum.mikrotik.com/viewtopic.php?f=2&t=12063

Max
http://maxid.com.ar
http://mikrotikexpert.com

or you can right click on the files and click "copy",open up winbox and click on the "files" button.Within files,click on the "paste" button.Once that is done the files are copied onto the board and ready for import.

I don't have a Linux box lying around to generate certificates on using OpenSSL. Is there any other way to get a certificate without paying a wad of cash?

just download a linux distribution (they all live cd's) .Then boot up with it on your windows machine, and create the certificate.Mount onto a flash drive or upload directly onto the routerboard