<span id="mailbox-conversation">Am I right to assume that with Cake more bandwidth should be available to use, without affecting latency?</span><div class="mailbox_signature">
<br>--<br>Alec Robertson</div>
<br><br><div class="gmail_quote"><p>On Sun, Jul 26, 2015 at 10:11 AM, Alan Jenkins <span dir="ltr"><<a href="mailto:alan.christopher.jenkins@gmail.com" target="_blank">alan.christopher.jenkins@gmail.com</a>></span> wrote:<br></p><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><br>>> Quick sub-question (off-topic so my apologies), this firmware I’m using that I linked to previously, has HTTPS enabled which means every time I go to Luci I get a security error in Chrome. How do I disable HTTPS?
<br>> I would say you do not disable it, but rather look why chrome complains (it might be that chrome dislikes self-signed certificates) and try to convince chrome to accept the certificate nevertheless. Or you could try firefox ;)
<br><br>Firefox is the definitely the simplest browser for this, it's the only
<br>one I've used. Just click through the instructions. A "permanent
<br>exception" is the default, which should actually help security. Feels
<br>ironic as I remember Firefox moving first on this & hence complaints
<br>about the scary warning messages etc.
<br><br>Searching instructions for Chrome on Linux ("ssl exception" OR "self
<br>signed certificate") they use a certutil command. Internet Explorer
<br>will use the Windows cert store, same with Chrome on Windows. (If you
<br>can add to the store using IE, that may be simplest & will cover both).
<br><br>Additional requirement for those methods should be that the cert CN
<br>matches the URL you access. Not sure about Chrome, but for general
<br>paranoia you should check that CN / common name / "issued to" doesn't
<br>say "*" i.e. "everywhere".
<br><br>Access the router using `http://hostname` matching the router hostname
<br>(as per /etc/config/system). dnsmasq will let that work. If you've
<br>changed the hostname, re-gen the cert by removing it and restarting.
<br><br>rm /etc/uhttpd.crt /etc/uhttpd.key
<br>/etc/init.d/uhttpd restart
<br><br>Alan
<br></blockquote></div><br>