ssl authentification on radiusdesk web interface

[Dan Ionescu]

From what i know..if a user enter the credentials ( user and password ...or
voucher code ) using web interface ( on standard port 80 or 8000 ) the
credentials can be intercepted by someone else, and this is a big security
issue, because the traffic between client browser and radius server is in
clear text and can be intercepted by anyone who is sniffing the network
with a simple packet analyzer .

I opened port 443 on nginx config file , but when i try to access radius
logon web interface using HTTPS protocol( https://10.1.0.1/..........) ,
the web interface is not loading entirely and i cannot login on radius
using SSL .
This problem is also for administrator interface ( https://10.1.0.1/rd/ ) .
If i use http://10.1.0.1/rd/.. everything is working fine.
I have to mention that port 443 is opened and is working fine; for example
if i access https://10.1.0.1/ i can see the message "Welcome to nginx! "
like you see it when you access http://10.1.0.1/

How do i log on in radius web interface using https or how do i pass
credential without risking that someone else to intercept my credentials ?

Tnx

[Dirk van der Walt]

Hi Dan,

Which captive portal are you using with RADIUSdesk? (CoovaChilli of Mikrotik)

The problem you experience by not being able to log into RADIUSdesk is most likely related to the rewrite rules on the nginx config file for the CakePHP back-end.

Although you now have the nginx server serving on 443 with the certificate etc working fine, you shouls also ensure CakePHP serves their content fine on that port.

see what the feedback for this URL is:
https://127.0.0.1/cake2/rd_cake/phrase_values/get_language_strings.json?_dc=1386509123289&language=4_4\

It should consist of a json string.

Kind regards