Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


routeros_self_signed_certificate

RouterOS self signed certificate example

For enabling the www-ssl and api-ssl service.

  • Create root certificate
    /certificate
    add name=root-cert common-name=router days-valid=3650 key-usage=key-cert-sign,crl-sign
    sign root-cert
  • Add HTTPS certificate
    /certificate
    add name=https-cert common-name=router days-valid=1100
    sign ca=root-cert https-cert
  • Enable https service, disable http
    /ip service
    set www-ssl certificate=https-cert disabled=no
    set www disabled=yes
routeros_self_signed_certificate.txt · Last modified: 2022/09/19 17:56 by admin