UMEA EUSKARA ETA GAZTELERA ALDI BEREAN Hizkuntza bi aldi ...
Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik...
Transcript of Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik...
![Page 1: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/1.jpg)
Open SSL Certificate (HTTPS) for
Mikrotik Hotspot Login
1
![Page 2: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/2.jpg)
About me
Aldi Nor Fahruin
Using Mikrotik since 2012
Freelance at PT Proxis Indonesia Solution
CV. Cipta Satmedia
Universitas Teknologi Yogyakarta
Certification :
MTCNA (Mikrotik Certified Network Associate) 2014
2
![Page 3: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/3.jpg)
Digital Certificate Infrastructur
and Concept
3
![Page 4: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/4.jpg)
Digital Certified Concept
4
Subcriber feedback
Digital certificate -> identity card Certificate Authority -> sovereign issued a certificate/ Government Subcriber - > User Request CSR (Certified signing request) -> Proposal
![Page 5: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/5.jpg)
Self-Signed Certificate
I want to use https for login but do not have the money
you can use a free application openssl
5
(CA)
![Page 6: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/6.jpg)
Public Key
![Page 7: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/7.jpg)
Difference Self-Signed Certificate and Signed by
Certificate Authority
Self-Signed Certified
Signed by
Certificate Authority
7
![Page 8: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/8.jpg)
HTTP vs HTTPS
8
![Page 9: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/9.jpg)
By default Mikrtotik hotspot login use protocol http
![Page 10: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/10.jpg)
Mikrotik Hotspot Feature
10
![Page 11: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/11.jpg)
Lab Demo
11
![Page 12: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/12.jpg)
1. Generate new private key # openssl genrsa -des3 -out hotspot.key 1024
12
![Page 13: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/13.jpg)
2. Generate certificate signing request (CSR)
# openssl req -new -key hotspot.key -out hotspot.csr
Will be made file hotspot.csr based hotspot.key
![Page 14: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/14.jpg)
3. Generate certficate signing request (CSR) based on exsisting certified openssl x509 -req -days 10000 -in hotspot.csr -signkey hotspot.key -out hotspot.crt
Will make file certificate ssl hotspot.crt based on points one and two
4. Upload file hotspot.key and hotspot.crt to Mikrotik router
Mikrotik by using FTP
14
![Page 15: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/15.jpg)
4. installation certified at Mikrotik Router 5. see the results of installasi /Certficate Print
15
![Page 16: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/16.jpg)
6. Plug connection www-ssl with certificate cert1
who finished in import
/ip service set www-ssl certificate=cert1
![Page 17: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/17.jpg)
7. Create Hostpot Mikrotik
17
![Page 18: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/18.jpg)
7. Make sure server profile hotspot can be connected with
https and certificate cert1
18
![Page 19: Open SSL Certificate (HTTPS) for Mikrotik Hotspot Login · About me Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas](https://reader031.fdocuments.net/reader031/viewer/2022021812/5cf9d2ad88c993bc7c8cd366/html5/thumbnails/19.jpg)
8. then try to access the hotspot