Skip to content

Instantly share code, notes, and snippets.

@benjaminblack

benjaminblack/install-a-custom-tls-certificate-on-an-asus-router-running-asuswrt-merlin.md

Last active August 14, 2017 16:22
Show Gist options
  • Save benjaminblack/c52411b9451e6b5bf8ed5f2201709d26 to your computer and use it in GitHub Desktop.
Save benjaminblack/c52411b9451e6b5bf8ed5f2201709d26 to your computer and use it in GitHub Desktop.
Download ZIP
Install a custom TLS certificate on an Asus router running AsusWRT-Merlin
Raw
install-a-custom-tls-certificate-on-an-asus-router-running-asuswrt-merlin.md

Edit: Deprecated as of 380.67 - see documentation

If https_crt_save variable is turned off, turn it on:

# nvram get https_crt_save
0

# nvram set https_crt_save=1
# nvram get https_crt_save
1

Copy private key and full chain to /etc/key.pem and /etc/cert.pem:

# cat >/ etc/key.pem
...

# cat > /etc/cert.pem
...

Get current contents of TLS certificate (empty if none):

# nvram get https_crt_file

Restart httpd, which reads /etc/key.pem and /etc/cert.pem, combines them (tarball), and saves the combination in https_crt_file.

On reboot, when httpd starts up, the files /etc/key.pem and /etc/cert.pem do not exist, so it takes the value of https_crt_file (if any) for the TLS certificate.

# service restart_httpd

# nvram get https_crt_file
... compare to previous certificate ...
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment