Community discussions

MikroTik App
 
User avatar
laitounejjar
just joined
Topic Author
Posts: 8
Joined: Thu Nov 01, 2018 10:39 am

PB HTTPS (SSL) on Hotspots : Urgent

Thu Nov 01, 2018 11:14 am

Hello everyone,
I have an internal mikrotik (v5.24) gateway with many interfaces (Hotspots) like the image in attach bellow. It work fine with http redirect, but users have problem when they use https (like google) to authenticate.
Please i need help on howto resolve the problem (with self-signed certificate or if possible with free ssl like let's encrypt). Please note that i have 1 WAN interface (like gw.domain.com) and 2 LAN interfaces (hs1.local , hs2.local).
Thanks.
MTK-GW.png
You do not have the required permissions to view the files attached to this post.
 
R1CH
Forum Guru
Forum Guru
Posts: 1101
Joined: Sun Oct 01, 2006 11:44 pm

Re: PB HTTPS (SSL) on Hotspots : Urgent

Sat Nov 03, 2018 12:51 am

Abandon your quest! As long as you aren't whitelisting the connectivity test domains used my modern devices and browsers, they will pop up the captive portal login automatically. Trying to intercept HTTPS requests is impossible, if you could do it then so could anyone on the network (internet), defeating the security guarantee that HTTPS offers.

Also RouterOS v5.24 is super old and your system is likely completely compromised at this point.
 
User avatar
laitounejjar
just joined
Topic Author
Posts: 8
Joined: Thu Nov 01, 2018 10:39 am

Re: PB HTTPS (SSL) on Hotspots : Urgent

Sat Nov 03, 2018 10:51 am

thanks for your replys.
May be Some additionnal precision here :
I have some public servers in my WAN zone (DNS, mail and WEB). the web server doesn'y have any pb with hhtps and my domain is a public domain. The gateway is just for internal access control.
thanks.

Who is online

Users browsing this forum: carcuevas, Google [Bot], nl2024, scoobyn8, tarfox and 38 guests