This is an old revision of the document!

Include support for HTTPS on CoovaChilli

Introduction

In recent years many well known websites are now by default served through https (server on port 443 and includes encryption)
CoovaChilli was originally only capturing http traffic (served on port 80 and does not include encryption)
There are however some advanced features included with CoovaChilli which allow it to also capture traffic going to port 443.
This document will go through the steps you have to go through to get it working with the MESHdesk / APdesk firmware.

A server with a public IP Address and FQDN having NGINX configured with a signed certificate by a known Certificate Authority (CA)
A LEDE build environment as stipulated in the page's parent document.
In our example we use here we have a server with a FQDN of 01.radiusdeskhosted.com
We followed the standard instructions from LetsEncrypt to obtain a certificate for NGINX. (https://letsencrypt.org/)

Copy the fullchain.pem and privkey.pem files from the public server to machine with the LEDE build environment. (