Can GL-1800ax Ever have automated “Let’s encrypt” cert process?

lama · 2022-03-21T18:01:25.751Z

Can GL-1800ax Ever have automated “Let’s encrypt” certificate renewal process? Something that further allows Turnibg ON Encrypted AdGuard DNS-over-QUIC? and,… something that provides encrypted SSL connections everywhere? (WebDAV, DDNS etc?)

Synology guys have this certificate renewal automated and while you guy’s router being so close to WAN port, you guys can’t consider automating such a critical aspect of access?

groentjuh · 2022-03-21T22:08:50.350Z

SSL certificates require a domein name, which the routers technically have (DDNS name), but they would also require that the router can proof it have access to said name. This would either require HTTP to the router (would not work on CGNAT/normal NAT etc etc) or the router to be any to set TXT records on gl-inet’s DDNS service with possible security issues being possible.

Having any other name, would require the router to be configured for that. Self-signed it pretty simple and if you want to really setup something else you can probably do that! Luci has “luci-app-acme” for that.

jimmod · 2023-04-20T11:30:22.948Z

I think their request is still valid and VERY specific. Although I agree with your comments, this is a specific feature request which other vendors such as Synology have implemented for remote HTTPs Access.

All gl-inet routers have a default domain name (DDNS name). Allowing the user to specify the ddns name as well as other custom names (which can be configured via your domain registrar to resolved to the ddns name) as valid certificate names would be a great addition to the GL-INet routers and would fulfil lama’s feature request.