HTTPS ?

General discussion about Universal Media Server (no support or requests)
Post Reply
Seladian
Posts: 2
Joined: Tue Jan 16, 2018 1:00 am

HTTPS ?

Post by Seladian » Tue Jan 16, 2018 1:33 am

One question HTTPS in web interface is possible ? If yes could someone give here instruction step by step "how to" ?

User avatar
valib
Developer
Posts: 586
Joined: Fri Feb 08, 2013 3:11 am

Re: HTTPS ?

Post by valib » Fri Jan 26, 2018 11:47 am

@Seladian there is not docummented feature in the UMS.conf. Add the

Code: Select all

use_https=true
to the UMS.conf and test it.

Seladian
Posts: 2
Joined: Tue Jan 16, 2018 1:00 am

Re: HTTPS ?

Post by Seladian » Sun Feb 11, 2018 6:44 pm

It doesn't work ..

I follow that instruction:

1. Generate certificate using keytool: keytool -genkey -keyalg RSA -alias selfsigned -keystore UMS.jks -storepass password -validity 360 -keysize 2048
2. Copy UMS.jks (passowrd: umsums) to UMS folder
3. In UMS.conf I add: use_https=true
4. Restart UMS

and.. connection doesn't work. I don't know why.

User avatar
valib
Developer
Posts: 586
Joined: Fri Feb 08, 2013 3:11 am

Re: HTTPS ?

Post by valib » Wed Feb 14, 2018 12:21 pm

@Seladian I don't know how the HTTPS was implemented by former UMS/PMS developers I only found the undocummented setting to enable it.

Lisasmith
Posts: 1
Joined: Mon May 14, 2018 6:02 pm
Location: UK
Contact:

Re: HTTPS ?

Post by Lisasmith » Mon May 14, 2018 6:06 pm

hi, I m new here from UK.

Selenahudson
Posts: 1
Joined: Tue May 29, 2018 12:07 am
Location: kenya
Contact:

Re: HTTPS ?

Post by Selenahudson » Tue May 29, 2018 12:12 am

No there is not currently an option to enable SSL.

For now, the UI is intended to be used on the local machine. If someone listen to your internal network communication, you have bigger problems.

For external use, the Duplicati UI is not safe yet, there are many things that you probably do not want exposed (i.e. the ability to list all files and folder names on the machine).

For the passwords, the intention is to not send them out once they are created.

To use SSL you need a fixed domain name, and have a certificate issued by a trusted CA, otherwise the browser will make it hard for you to use (and reduce safety). That is not currently an intended usage scenario for Duplicati. If you need remote monitoring, I suggest VPN for now.

Post Reply