Stwórz lokalny CA i podpisz go:
[admin@MikroTik] > certificate add name=local-cert common-name=local-cert key-usage=key-cert-sign,crl-sign
[admin@MikroTik] > certificate sign local-cert
progress: done
Utwórz certyfikat dla Webfig (non-root certificate):
[admin@MikroTik] > certificate add name=webfig common-name=192.168.88.1
[admin@MikroTik] > certificate sign webfig
progress: done
[admin@MikroTik] > certificate print
Flags: K - private-key, A - authority, T - trusted
# NAME COMMON-NAME SUBJECT-ALT-NAME FINGERPRINT
0 K A T local-cert local-cert 935bbacce1...
1 K A T webfig 192.168.88.1 fd1fb5d85c...
Dodaj certyfikat do serwisu:
[admin@MikroTik] > ip service set www-ssl certificate=webfig disabled=no
Wyłącz Webfig na porcie 80:
[admin@MikroTik] > ip service set www disabled=yes
Sprawdź:
[admin@MikroTik] > ip service print
Flags: X - disabled, I - invalid
# NAME PORT ADDRESS CERTIFICATE
0 XI telnet 23
1 XI ftp 21
2 XI www 80
3 ssh 22
4 www-ssl 443 webfig
5 XI api 8728
6 winbox 8291
7 XI api-ssl 8729 none
More information
Ustaw Available From:
[admin@MikroTik] > ip service set www-ssl address=192.168.88.2/24,10.1.1.0/27