Trouble with BI5 secure connection: NEED HELP PLEASE

[dee]

I am running BI5 with 4 cams on a Win10 and also remotely on my android phone. Everything works really great except for 2 things:

1. The android BI app will only connect with http:// and not with https://
This non secure connection works fine from my home WIFI and also from a public WIFI.
Even if I try a local connection like https://router.asus.com:8443/ , I get router.asus.com refused to connect.


Try:

• Checking the connection
• Checking the proxy and the firewall

ERR_CONNECTION_REFUSED



2. The remote access wizard fails when it gets to the page that tests the HTTPS connection.
I get an error 12003.
Below are some of my router settings which may influence these failures. Can you see anything wrong here?



Asus RT-AC68U router

Internet Connection
Enable WAN Yes
Enable LAN Yes
Enable UPnP No
WAN DNS Settings
Connect to DNS Server automatically Yes

Account Settings
Authentication None
Special requirements from ISP
Host Name Blank
MAC address Blank
DHCP query frequency Normal mode
Extend the TTL value No
Spoof LAN TTL value No


DDNS

Enable DDN Yes
Xxxxxxxxxxxxxxxxxxxxx.asuscomm.com
And I have a valid certificate from Let's Encrypt Authority X3a


NAT Passthrough

All are ENABLED, except PPPoE Relay which is disabled


Under IPv6
Connection type is Passthrough
Connect to DNS Server automatically is Enabled

 

[SouthernYankee]

Not much help on BI5. not any help on IPv6

But you should be running openVPN on your ASUS router, use the openVPN client on your phone to connect to your home network. If connected with openVPN https or http does not matter it is secure.

 

[bp2008]

@dee you haven't even told us what service you have listening for https connections. Stunnel? nginx? Something different?

 

[dee]

sorry, SSH port 22 enabled
I really don't know but think that this is stunnel?
If someone can help I can let them in with remote desktop?

 

[TL1096r]

sorry, SSH port 22 enabled
I really don't know but think that this is stunnel?
If someone can help I can let them in with remote desktop?

Stunnel would be this:
What are you using/doing to make your camera more secure?

 

[dee]

Thank you TL1096r!
I installed Stunnel as per the video. It works.
Now I need to find out how to get and install trusted server certificate.

 

[TL1096r]

Thank you TL1096r!
I installed Stunnel as per the video. It works.
Now I need to find out how to get and install trusted server certificate.

No problem!

for ui3? that info is in the thread too