How would you secure a home router with a self-signed certificate?

Posted by jldugger on Server Fault See other posts from Server Fault or by jldugger
Published on 2011-01-06T15:08:41Z Indexed on 2011/01/06 15:55 UTC
Read the original article Hit count: 197

littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, and as I think about it, I've never seen one of these internal admin websites with certs that wasn't self signed.

Given a webserver on IP 192.168.1.1, how do you secure it to the point that Firefox doesn't offer warnings (and is still secured)?

© Server Fault or respective owner

How would you secure a home router with a self-signed certificate?

Posted by jldugger on Super User See other posts from Super User or by jldugger
Published on 2011-01-06T15:08:41Z Indexed on 2011/01/06 23:55 UTC
Read the original article Hit count: 197

littleblackbox is publishing "private keys" that are accessible on publicly available firmwares. Debian calls these "snake-oil" certs. Most of these routers are securing their HTTPS certs with these, and as I think about it, I've never seen one of these internal admin websites with certs that wasn't self signed.

Given a webserver on IP 192.168.1.1, how do you secure it to the point that Firefox doesn't offer warnings (and is still secured)?

© Super User or respective owner

Related posts about security

Related posts about ssl-certificate