Goodnight

I hope you can help me with this issue .... I am having problems installing an SSL certificate purchased in Godaddy in my routers mikrotik rb951G that has a hotspot as services and requires installing an SSL certificate to redirect the https pages to the login of the hotspot ... I know that a CSR has to be generated in the mikrotik (please give me the steps that worked for them, maybe I'm doing something wrong) and then import it into the certificate management panel in Godaddy ... Then download the CRT generated by Godaddy and import it into the mikrotik ... When importing the certificate in mikrotik only generates the acronym KT and when I test them on a client or smartphone computer it turns out that the page is not safe ... According to the investigation should appear the acronym KLT


Perform the following manual https://wiki.mikrotik.com/wiki/Manual:C ... rtificates but I still have errors (attached images), it shows me as if the certificate was not created correctly ... I did the following:

1. create the CSR through the mikrotik
2. I uploaded the CSR to Godaddy and downloaded the CRT
3. Then import the CRT certificate from goddady

The hotspot works in the following way, it redirects you to a login page that is hosted on a web server crazily that is, I do not have a hosting my pages that will show to the user are on my local server

Thank you

Is it just my impression, or are you really expecting https://www.youtube.com to work (= not show insecure warning) with your certificate? Because I'm pretty sure you didn't get certificate valid for www.youtube.com (and no, it's not you doing something wrong, they just don't give certificates valid for someone else's domains to everyone). So if the first page opened by user is https one, there will be warning, but browser (or OS) should detect limited connection and offer you a login page. And that's where your certificate can be used.

Is it just my impression, or are you really expecting https://www.youtube.com to work (= not show insecure warning) with your certificate? Because I'm pretty sure you didn't get certificate valid for www.youtube.com (and no, it's not you doing something wrong, they just don't give certificates valid for someone else's domains to everyone). So if the first page opened by user is https one, there will be warning, but browser (or OS) should detect limited connection and offer you a login page. And that's where your certificate can be used.

Hello

thanks for your answer

The ssl that I acquired is for my domain, not for youtube ... that screen captures are at the client level as an example, when you want to enter any page either http or https (in this case youtube is https) it should be redirected to my login page that is on my local web server, but it shows me those messages as if the certificate granted by Godaddy will not work

Only http can be redirected, https will always show error when it doesn't get the right certificate. When browser wants to open https://<something>, it will only accept valid certificate for <something>, nothing else. You can't redirect it elsewhere, it's dead set on connecting to requested page. But independent from that, it will detect limited connection and will open login page for you (which looks like it did, see the background tab, and that one should use your certificate if it's https).

Your screenshot is showing everything working perfectly - the browser has detected the hotspot and all you have to do is click "Connect".

Your screenshot is showing everything working perfectly - the browser has detected the hotspot and all you have to do is click "Connect".

This guy is correct, any modern device/modern operating system should detect the presence of a hotspot when you first connect to the network and present you a separate page to login on, or at very least a prompt to open that page.

if you ignore this or have it disabled and try and open another page say for example Facebook or YouTube you will get a certificate error because all of these sites are secured and you were presenting a certificate that does not match these.

See this as an example of how captive portal detection works in chromium: https://www.chromium.org/chromium-os/ch ... -detection

Sent from my Pixel 2 using Tapatalk

Hello

thanks for your answer

I was doing some tests, through computers I still get the same message, but when I try to navigate from a smartphone, I get an error as if I had no connection automatically redirect me to the homepage.

I was reading and found this forum: viewtopic.php?t=86455
 
someone could guide me

Thank you

Everything is working fine. There is nothing more to do.

Phones open the webpage automatically as a convenience, in desktop Chrome you have to click "Connect". You cannot alter how the phones or browsers behave.