This document discusses how to generate an OpenSSL certificate for HTTPS login on a Mikrotik hotspot router when funds are limited. It provides step-by-step instructions to: 1) Generate a private key and certificate signing request using OpenSSL 2) Generate a self-signed certificate based on the private key and CSR 3) Upload the key and certificate files to the Mikrotik router and configure the hotspot service to use the certificate for HTTPS connections.

1. Open SSL Certificate (HTTPS) for
Mikrotik Hotspot Login
1

2. About me
Aldi Nor Fahruin Using Mikrotik since 2012 Freelance at PT Proxis Indonesia Solution CV. Cipta Satmedia Universitas Teknologi Yogyakarta Certification : MTCNA (Mikrotik Certified Network Associate) 2014
2

3. Digital Certificate Infrastructur
and Concept 3

4. Digital Certified Concept
4
Subcriber
feedback
Digital certificate -> identity card Certificate Authority -> sovereign issued a certificate/ Government Subcriber - > User Request CSR (Certified signing request) -> Proposal

5. Self-Signed Certificate
I want to use https for login
but do not have the money
you can use a free application openssl
5
(CA)

6. Public Key

7. Difference Self-Signed Certificate and Signed by
Certificate Authority
Self-Signed Certified
Signed by
Certificate Authority
7

8. HTTP vs HTTPS
8

9. By default Mikrtotik hotspot login use protocol http

10. Mikrotik Hotspot Feature
10

11. Lab Demo
11

12. 1. Generate new private key
# openssl genrsa -des3 -out hotspot.key 1024 12

13. 2. Generate certificate signing request (CSR)
# openssl req -new -key hotspot.key -out hotspot.csr
Will be made file hotspot.csr based hotspot.key

14. 3. Generate certficate signing request (CSR) based on exsisting certified openssl x509 -req -days 10000 -in hotspot.csr -signkey hotspot.key -out hotspot.crt
Will make file certificate ssl hotspot.crt based on points one and two
4. Upload file hotspot.key and hotspot.crt to Mikrotik router Mikrotik by using FTP
14

15. 4. installation certified at Mikrotik Router 5. see the results of installasi /Certficate Print
15

16. 6. Plug connection www-ssl with certificate cert1
who finished in import
/ip service set www-ssl certificate=cert1

17. 7. Create Hostpot Mikrotik
17

18. 7.Make sure server profile hotspot can be connected with https and certificate cert1
18

19. 8. then try to access the hotspot

20. akun_aldi@yahoo.com
+62 8564 3904 438
Aldi N Fahrudin
20