OPNsense Forum

English Forums => General Discussion => Topic started by: itenghm on November 07, 2016, 10:42:29 pm

Title: Captive Portal in Public Wi-Fi and https
Post by: itenghm on November 07, 2016, 10:42:29 pm

Hello all,
I have this problem with Captive portal, I have configured it depending on the documentation. I have a problem when opening https pages, the captive portal is not working and the page doesn't load, but when opening http pages the captive portal works fine. 
I cannot tell all users in a public Wi-Fi network to open non https pages first so they can be redirected to the login page of the captive portal, and it is not possible to ask them to install the SSL certificate
Is there a workaround to solve this?
Thanks

Title: Re: Captive Portal in Public Wi-Fi and https
Post by: itenghm on November 09, 2016, 02:02:54 pm

I tried many things still not working with https, has anyone a workaround for this

Title: Re: Captive Portal in Public Wi-Fi and https
Post by: fatmann66 on November 13, 2016, 03:12:38 am

just a shot it the dark. if you use a real ssl cert instead of a self signed  the  public wouldn't have to install a cert. it would be trusted.

I know there are a few places you can get a free 1yr cert. (don't have a link offhand) its worth a shot. other option is godaddy there certs are cheap.

Title: Re: Captive Portal in Public Wi-Fi and https
Post by: fabian on November 13, 2016, 12:52:12 pm

this will not work because you cannot redirect the host (your certificate is not valid for other domains than yours). But the connection to the login page would be trusted.

Title: How to configure OPNsense on godaddy Server Dedicated server
Post by: mohammed on May 01, 2017, 10:02:54 am

Wrong window sorry, I have started new topic with this subject .

Title: Re: Captive Portal in Public Wi-Fi and https
Post by: Obeng on July 08, 2021, 07:00:20 pm

I have used a trusted ssl certificate.The https captive portal page works perfectly and users are able to authenticate.However, after authentication, accessing regular https websites timeout