Author Topic: Setup https on Vera.  (Read 23776 times)

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Setup https on Vera.
« on: February 19, 2009, 07:07:23 am »
Hi.

Can one of you tell me how to set up SSL on Vera?

I have a Windows certification server in my home, which I would like to use. But a self generated certifcate would also be okay.

To me it looks like only a part of OpenSSL is installed on Vera?

Lighttpd seems easy to set up. But maybe I am missing something. :-)


Regards
Morten

Offline micasaverde

  • Hero Member
  • *****
  • Posts: 1666
  • Karma: +15/-1
Re: Setup https on Vera.
« Reply #1 on: February 20, 2009, 03:36:50 pm »
We don't have an SSL cert on Vera itself.  For remote access, we put one on findvera.com, of course.  I'm not sure if lighttpd supports ssl, but, if so, it should work.  It's open, so you can reconfigure the conf files.  Just do a factory reset if it gets messed up.

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #2 on: February 24, 2009, 04:33:29 pm »
My Vera runs https. :-)

Offline ykmag

  • Sr. Newbie
  • *
  • Posts: 40
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #3 on: February 25, 2009, 03:08:18 am »
Please tell how you managed to do that.

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #4 on: February 25, 2009, 03:52:29 am »
In short.

I unpacked the openssl util ipk pack.

copied openssl to /usr/bin on Vera and used it.

I will try to make at small HowTo within a couple of days. :-)

If you read Danish (or use Google translations) there are a version 0.01 here:

http://zwaves.dk/forum/viewtopic.php?f=22&t=242

Offline ykmag

  • Sr. Newbie
  • *
  • Posts: 40
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #5 on: February 25, 2009, 05:02:59 am »
I am norwegian so danish is no problem ;D

Offline ASIHome

  • Sr. Member
  • ****
  • Posts: 347
  • Karma: +2/-3
Re: Setup https on Vera.
« Reply #6 on: July 01, 2009, 10:34:19 am »
Did you ever create the HowTo for this for those of us who don't speak Danish?

Thanks,

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #7 on: July 01, 2009, 12:50:02 pm »
I never got around to it.

Terkild made a script, so my Howto seemed obsolete. :-)

log in to vera using telnet / ssh
go to /tmp/ dir
cd /tmp

Download ssl script
wget http://j0nas.dk/dump/vera_ssl.sh

Run script
sh vera_ssl.sh

Press "y" and enter to install ssl
The script now get openssl and make the necassary configuration.

Now you can use https://your_vera


Offline ASIHome

  • Sr. Member
  • ****
  • Posts: 347
  • Karma: +2/-3
Re: Setup https on Vera.
« Reply #8 on: July 01, 2009, 12:53:21 pm »
Thank you.

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #9 on: July 01, 2009, 01:17:55 pm »
Hmm I get 404 on Terkilds site.

A quick translation of my Danish version 0.0.1:

I got openssl-util_0.9.8j-1_mipsel.ipk

Renamed it to openssl-util_0.9.8j-1_mipsel.tar.gz

Unpacked it

Unpacked data.tar.gz

Copied the openssl file to /usr/bin on Vera

ssh or telnet to Vera

cd /etc/ssl

mkdir certs

cd certs

openssl req -new -x509 -keyout lighttpd.pem -out lighttpd.pem -days 365 -nodes

Answer the questions.

edit /etc/lighttpd.conf

add

$SERVER["socket"] == ":443" {
ssl.engine = "enable"
ssl.pemfile = "/etc/ssl/certs/lighttpd.pem"
}


Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #10 on: July 01, 2009, 01:24:54 pm »
Terkilds site works now. :-)

Offline ASIHome

  • Sr. Member
  • ****
  • Posts: 347
  • Karma: +2/-3
Re: Setup https on Vera.
« Reply #11 on: July 01, 2009, 05:29:26 pm »
Works, however IE7/8 gets upset about the certificate. Any way to fix that?

Thanks,

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #12 on: July 01, 2009, 05:39:50 pm »
Click on "Certificate error" besides the address bar.

Click "View certificate"

Click "Install Certificate"

next

Place all certificates in the following store

browse to "Trusted Root Certification Authorities"

Ok

Next

Yes (in pop up box)


My IE8 is still angry, but I get right in. :-)

Offline mhn

  • Full Member
  • ***
  • Posts: 152
  • Karma: +0/-0
Re: Setup https on Vera.
« Reply #13 on: July 01, 2009, 05:42:53 pm »
It is more simple in Firefox.

Offline Henk

  • Hero Member
  • *****
  • Posts: 820
  • Karma: +3/-0
Re: Setup https on Vera.
« Reply #14 on: May 29, 2011, 01:40:45 pm »
Is there any update on this old post?
using https for vera would improve some security!
| Vera2 @ UI4 1.1.1350 / 3.20 | Vera Lite @ UI5 | Vera 3 @ UI5 | 2x Merten  504519 | 1x Duewi  064374 | 1x Everspring SM103 doorbell mod |1 Y-cam IP cam | various LUUP plugins |