A proposal of https certificate assignment system for luci

[Fernando Frediani]

On 09/10/2020 08:29, Bas Mevissen wrote:
> On 2020-10-04 15:48, abnoeh wrote:
> <clip>.
>
> So I think it is reasonably safe to do the initial setup over HTTP 
> (without the "S") at the first boot if there are no certificates 
> available from a previous OpenWRT install. Then the user can setup the 
> WAN side if needed and upload (from local PC), generate (self-signed) 
> or acquire (e.g. Let's Encrypt) the certificates for Luci. After that, 
> the connection is switched to HTTPS and HTTP switched off.

Exactly. Only those who really need and want to have a HTTPS certificate 
can to that manually after the router is setup and has Internet connection.

Regards
Fernando

>
>
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/mailman/listinfo/openwrt-devel