I was wondering if Hubitat Staff has any response on providing any updates for expired certificates on the C-7 hubs..
it is mildly annoying to see the "Not Secure" and adding an exception just to get to the hub webpage.
there had been some discussion here.. but had no response from Hubitat staff...
As someone who has worked in computer security, this thread disturbs me greatly. Yes, of course you should not allow access to your Hubitat Evolution directly from the Internet, and yes, a VPN is the right way to provide access. But that's not enough. You also have to ensure that traffic over your LAN to/from the Hubitat Evolution is encrypted. Why? Even on a secure home network it's very easy to get eavesdroppers. Just consider a guest asking to connect to your WiFi (or worse, one of your kids'…
1 Like
aaiyar
November 29, 2022, 6:10pm
2
If you want to use https to access your hub, you need to install your own certificate as described by Hubitat staff in this post:
Didn't find any issues with HTTPS setup, so fire away. Let's call it an extended beta.
To set up HTTPS, go to http://your.hubs.ip.here/hub/advanced/certificate , copy/paste certificate/private key and save. Once saved, reboot the hub for the setting to take effect.
There's an option of SSL only on the screen. I suggest testing HTTPS connection before turning it on.
If something doesn't work, you can disable SSL by going directly to http://your.hubs.ip.here/hub/advanced/disablessl . You should …
2 Likes
perfect.. the links that you provided .. thats what I was looking for.. on how to install my own certificate..
1 Like
system
Closed
November 29, 2023, 9:36pm
4
This topic was automatically closed 365 days after the last reply. New replies are no longer allowed.