Community discussions

MikroTik App
 
Bnolib
just joined
Topic Author
Posts: 6
Joined: Fri Apr 26, 2019 10:00 pm

HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Fri Feb 10, 2023 12:06 am

Unfortunately the https-redirect parameter of IP/Hotspot/Profile has been removed in RoS 7.5 :

Extract from change logs :
*) hotspot - removed "https-redirect" option;

This is very annoying because we are using Mikrotik routers for hotspots and without this feature, the unauthenticated users are no longer automatically sent to hotspot login page, which is a big problem for our hotspot deployments.

Is there another way to enable https redirection on RoS 7.5+ ?
Or could you consider adding this feature in new releases ?

Thanks
 
Sob
Forum Guru
Forum Guru
Posts: 9188
Joined: Mon Apr 20, 2009 9:11 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Fri Feb 10, 2023 3:21 am

But it never really worked anyway. Or did it? I mean properly, without certificate errors. Any client should be aware that hotspots exist and try to detect them automatically. If that doesn't work with your hotspot for some reason, it's probable best to try to find why. Because it should, and then you wouldn't need to redirect https.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26912
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Fri Feb 10, 2023 9:39 am

Like the above poster says, all modern operating systems do some checking in the background and can detect that there is a login page, and then show it.
So what specifically is not working for you since this change?
 
Bnolib
just joined
Topic Author
Posts: 6
Joined: Fri Apr 26, 2019 10:00 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Sun Feb 12, 2023 4:36 pm

Thanks for your replies, let me provide the context

We have a lot of hotspots (several hundres) running with Mikrotik routers for several years with many models from hex to CCR.
They are set with external captive portal (ADIPSYS Hotspot Manager) + signed SSL certificate with HTTPS and https-redirect set in profiles.
Without HTTPS / https-redrect on RoS v6, we had warnings during the POST process with modern browsers that detect when the portal in https is then switching to http post.
So we added an SSL certificate and all is working good.

We had recently a RB4011 with RoS 7.6 and noticed that https-redirect disappeared.
We did a simple test with the same setup than usual and a laptop running win11 connected

With our standard setup, when we do that, the browsers (edge, firefox) can identify that the laptop is behind a hotspot, and are pushing the user to click on a link with trigger the captive portal appereance. I can provide a screenshot of the message you get but this is a classic message.

With RoS v7.6, it did not happen : the browser could detect that the laptop was behind a hotspot
And if the user has the browser set with a https URL (which is very likely to happen), you get an error (just normal)
Tested with Firefox, Edge, Chrome.

I did not yet test on Android / iPhone, I hope it works but to be checked. But my first concern is that for hotspots on which we have users running a Windows laptop, which corresponds to a significant amount of users, removing the https-redirect will for sure increase the calls to technical support.

All Wi-Fi vendors are keeping the "HTTPS redirect" feature, so my suggestion would be to keep this feature even if you think this is not relevant. Because on the contrary to what you say, when you run WiFi Hotspots, you have a looooot of devices running multiple operating systems, old and "modern".
And Windows11, which is what I would call a modern operating system, did not achieve correctly this detection with RoS v7.6, while I guarantee it works very well with the https-redirect feature on RoS v6 firmware.
I can provide more info if you want to reproduce it.
 
User avatar
armandfumal
Member Candidate
Member Candidate
Posts: 163
Joined: Wed Apr 25, 2012 5:50 pm
Location: Weiswampach,LUX
Contact:

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Wed Apr 19, 2023 8:50 pm

I have the same issue since 7.5.
only rfc 8908 with dhcp option 114 works a boot start...with Win 11 and Mac OS

but if you cancel it, the page is not appear again because https is not redirected, If you call a http website, thats work...but at this time 99% are on https now...
https is no more redirect to captive portal, we have to communicate to user the url of the portal.

we use Unifi, Tplink and Fortinet captive portal that works correctly with https redirect.

@normis, some times this is difficult to understand why Mikrotik remove key features...

I precise that concern only user using ethernet connection, Wifi connection redirection works perfect because they using rfc8908 at each time you connect in wireless...
not the case in physical ethernet. That reduce the issue, but for some users
 
User avatar
kvee
newbie
Posts: 38
Joined: Mon Feb 13, 2023 7:59 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Tue Aug 29, 2023 9:41 pm

I'm testing with RouterOs 7.11 and there is no https-redirect option.
While un-authenticated.
When I browse to HTTP domain it's redirect me to login page correctly.
When I enter just domain for example "google.com" then it's redirect me to login page correctly.
When I enter domain with HTTPS for example "https://google.com" then it is not redirect me to login page but showing error message.
"PR_END_OF_FILE_ERROR"
 
leonardogyn
just joined
Posts: 18
Joined: Wed Dec 04, 2019 4:47 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Tue Aug 29, 2023 10:24 pm

I have a lot of MKs with hotspot-enabled networks, and I wasn't even aware of https-redirect stuff. As already said, any modern OS will try identifying the presence of a hotspot using regular HTTP connections, not HTTPS. In the dozen cases I have, serving thousand of different users daily, there's really no big problem on not intercepting HTTPS connections for that purpose. As already also said, any modern OS/browser will fail on certificate-checks anyway for HTTPS intercepted connections.

MK Hotpost never needed/required HTTPS interception to work anyway, at least not for serving Wiindows/Android/iOS/Mac devices.
 
johanbobbies
just joined
Posts: 8
Joined: Mon Mar 28, 2022 10:45 am

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Thu Nov 09, 2023 3:10 pm

Is there anyway to replicate the HTTPS redirect feature by creating the Firewall rules manually?
 
AzDsL
Frequent Visitor
Frequent Visitor
Posts: 61
Joined: Sun May 22, 2022 4:17 am

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Fri Dec 22, 2023 6:09 pm

Is there already a solution to this redirection problem? I also need this function in my use case.
 
abdolali
just joined
Posts: 1
Joined: Sun Jan 14, 2024 3:39 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Sun Jan 28, 2024 9:37 am

Please restore "https-redirect" option :cry:
PLEASE
 
toxicfusion
Member
Member
Posts: 324
Joined: Mon Jan 14, 2013 6:02 pm

Re: HTTPS-redirect with RoS 7.5 - bad news for hotspots...

Sun May 26, 2024 4:02 am

I concur with this. We have several campground customers that were on rOS 6.0 with HTTPS-Redirection, and zero issues - just worked. This is with using external captive portal or hotspot providers.

Bring back HTTPS-Redirect in rOS 7.X.....

This is causing havoc with our customers and they're wanting to switch vendors. Would like a firewall rule, or this brought back.

Who is online

Users browsing this forum: Marc1963, Techsystem and 32 guests