$ sh -c "$(wget -qO - https://kazoo.ga/pixelserv-tls/config-webgui.sh)"

This script (v0.1.0) will guide you through the process of using
your Pixelserv CA to issue a new certificate to ASUSWRT WebGUI.

As a pixelserv-tls user, you already have generated your own
root CA certificate during installation and have your Pixelserv CA certificate
imported on client devices and browsers.

Hence, using your Pixelserv CA to issue a new certificate for WebGUI saves you
hassle to import a newly self-signed certificate upon every firmware upgrade.

Simply re-run this script to issue and config WebGUI after every firmware
upgrade. No more invalid certs and imports.

*****

Before you proceed, pls have pixelserv-tls installed and running. You shall also
have your Pixelserv CA cert imported on a test client.

*****

Get to know more about pixelserv-tls, please go to https://kazoo.ga/pixelserv-tls/


  1. Issue and configure a certificate for ASUSWRT WebGUI

Type 1 to proceed or anything else to quit: 1


Use your Pixelserv CA to issue a certificate to domain:

  a. my.asuscomm.com
  b. router.asus.com

Note that (b) works for access from LAN and VPN and recommended. (a) additionally works for WAN.

You should have your Pixelserv CA imported in a test client.
Or else your client will not treat the newly issued cert as valid.

Type a, b to proceed or anything else to quit: b

*****
A new cert has been issued by your Pixelserv CA to domain: router.asus.com

This script is about to configure and restart WebGUI.

Please type 'yes' to continue or anything else to quit.

yes

*****
New cert configured. WebGUI restarted. Please keep this terminal open and
try to access WebGUI from a test client.

If you see a padlock, congrats or else you may revert the change.

Type 'revert' to restore or anything else to quit and enjoy the new cert.

fan q kvic


Congratulations. All done. Happy pixelserv'ing!

This script has backup WebGUI's original cert under /jffs.
You may safely clean them up with:

       rm -i /jffs/cert.pem-bk
       rm -i /jffs/key.pem-bk
$