Third Party SSL Cert on Reolink Camera

[rob_701906869137584]

On the RLC-410W, I was able to upload a certificate as follows.

Connect to the camera's web interface.

Navigate to: Settings / Network Settings / Advanced / HTTPS Settings / Set Up

This will display two file fields: Certificate and Keyfile.

The certificate should be a PEM, Base 64 text file containing the public certificate. The filename must end in ".crt"

The keyfile should be a PEM, Base 64 text file containing the private key. The filename must end in ".key"

You will need a Certification Authority of some sort and might need to convert the files. For example, the Windows certificates manager will not export a private key to the needed format, but OpenSSL can do it.

After successfully uploading the files, close the browser tab to reset the connection.

[user_714023666557100_714023666557100]

@rob_701906869137584

Hello, is it possible to load a certificate chain (root CA, intermediate CA and camera public certificate in one PEM file) into the camera so that only the root CA is required on the PC or NAS?
Otherwise the intermediate CA would also have to be imported on all systems, where currently only the root CA is required.
Almost every device or web server now offers the option of importing the chain as a PEM file.
Many thanks in advance for the information.

[joseph_1979]

@user_714023666557100_714023666557100 You cannot import any PEM file. Reolink cams use self signed certificate.

[user_751368714272911_751368714272911]

Hello, I have the same problem. When downloading my certificate and key, it takes forever, and no messsage. Could reolink update the interface to accept these certificates ? thanks !

[user_783763327668419_783763327668419]

I know this is an old post but since I found it during searching for more info on SSL I thought maybe others would find my script to renew certificates using the API interesting.

https://gist.[censored]/velzend/895c18d533b3992f3a0cc128f27c0894

Have fun

[user_797938908946587_797938908946587]

@user_783763327668419_783763327668419 Thank you so much for this !

I am trying to run your script to upload let's encrypt certificates. Do I need to convert them to a different format? I assume that your script also works for other reolink cameras (I have the 811A).

[joseph_1979]

@user_797938908946587_797938908946587 You need the certificate file with extension .crt and the key file with extension .key. You need to use OpenSSL to generate them.

[user_797938908946587_797938908946587]

@joseph_1979 Thank you. Can the Let's encrypt generated keys be converted to an acceptable format? I am rather lost with the different ciphers and format. Thank you for taking the time to respond.

[user_797938908946587_797938908946587]

@joseph_1979 Thank you. It seems to be an issue with the code being applicable to my camera. If I upload the (lego) generated certificates manually through the web interface, it works. But running through the python script fails.