Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    I am using a self-signed certificate. HTTP is working fine, but HTTPS is not.

    Scheduled Pinned Locked Moved Captive Portal
    2 Posts 2 Posters 284 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • G
      goldsoft
      last edited by

      I am using a self-signed certificate. HTTP is working fine, but HTTPS is not. I have set it to allow login without verification and there are no pop-up windows. When using HTTP, it can redirect correctly and everything is normal. However, when using HTTPS, it cannot redirect properly and constantly pops up a log out window. My certificate is the one that comes with PFSENSE.

      GertjanG 1 Reply Last reply Reply Quote 0
      • GertjanG
        Gertjan @goldsoft
        last edited by

        @goldsoft said in I am using a self-signed certificate. HTTP is working fine, but HTTPS is not.:

        My certificate is the one that comes with PFSENSE

        If you had a web site with a self signed certificate, yo would see the same issue : the browser would complain, as the certificate was signed by 'some one' that isn't on his 'trusted signer list'.
        When you visit pfSense GUI using the build in auto generated certicate, you saw the same thing.
        Easy solution : import the cert into your web browser cert store, and now its trusted.

        The thing is : a captive portal, typically, is used for visitors, and you want them to be able to use your wifi.
        With a self signed certificate, they should accept your unsigned cert first, or they have to import the cert .... and this is way to impractical.
        If you want to use https : get a domain name, and use that domain name to get a trusted certificate with the help of the pfSense package "acme".

        Btw : the https login page is only protecting the login page. As soon as the user is logged in, every site he'll visit on the internet is using https anyway. Mail comes in also over TLS.

        I'm using https for my captive portal (a hotel) because its more serious to show
        "https://portal.hotel-brand.tld" with a nice padlock an no browser complaints, as a login URL as is "http://192.168.2.1/...."
        ( Yes, I won (rented) "hotel-brand.tld")

        You could do this.

        No "help me" PM's please. Use the forum, the community will thank you.
        Edit : and where are the logs ??

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.