SSL Cert on ISY99

[tome]

I installed a self-signed SSL cert on my ISY today and now iLinc cannot access the ISY when off my local network. Is there a way to install a cert in iLinc? What can I do to resolve this problem?

[AdminWes]

Hi tome,

iLinc is configured to accept all SSL certs no matter the source.

Verify that your router IP (for outside internet access) is entered correctly in the SSL - https:// field in My Settings. Also verify that your router is forwarding port 443 to your ISY and 443 is entered as the SSL Port in My Settings in iLinc. Lastly, verify that the Connect Method in iLinc is set to Auto. iLinc will now auto switch to using HTTPS (SSL connection) when iLinc detects it is not connected to your local network.

Wes

[tome]

Hi tome,

iLinc is configured to accept all SSL certs no matter the source.

Verify that your router IP (for outside internet access) is entered correctly in the SSL - https:// field in My Settings. Also verify that your router is forwarding port 443 to your ISY and 443 is entered as the SSL Port in My Settings in iLinc. Lastly, verify that the Connect Method in iLinc is set to Auto. iLinc will now auto switch to using HTTPS (SSL connection) when iLinc detects it is not connected to your local network.

Wes

Hi Wes,

First, iLinc has been working fine for me for at least several weeks. I was using port 4379 (just picked at random) and use DYNDNS to track my home address. Today, after installing the cert, iLinc says "Failed to Connect Error Received = can't connect to host" every time.

Just to recheck everything and try again....
My ISY is now set to use HTTPS Port: 443 (and it rebooted after I made this change as expected)
My Router is port forwarding 443 to the ISY within my network (and I can see that installed in it's tables)
I changed iLinc from using my dyndns name to the actual address just to be sure
I changed iLinc to SSL port 443
Connect method (remains): Auto (HTTPS)

I turned off wifi on my iphone so it uses 3g (off my home net).
I touch "Tap to Sync with ISY"....Same behavior - Failed to Connect

[AdminWes]

Hi tome,

Thanks for the detailed response. I just thought of another possiblity. What firmware are you using? UDI has stated that there is a known bug in HTTPS handling that iLinc exposes when running firmware 2.7.6 and below. They recommend upgrading to 2.7.7 or the new 2.7.8a release.

Wes

[tome]

Hi tome,

Thanks for the detailed response. I just thought of another possiblity. What firmware are you using? UDI has stated that there is a known bug in HTTPS handling that iLinc exposes when running firmware 2.7.6 and below. They recommend upgrading to 2.7.7 or the new 2.7.8a release.

Wes

I upgraded to 2.7.8 on Sat (1/2) and was running 2.7.7 before that. I think I ran iLinc after the upgrade (remotely) but I am not 100% sure. I wonder if they bongled something in 2.7.8...?

I have another ISY that I am taking to a different site, I will upgrade it to 2.7.8 and see what happens...

Tome

[AdminWes]

Hi Tome,

I went through the process of requesting and installing a new self-signed cert on my ISY running 2.7.8 for both a 512 bit cert and a 1024 bit cert. I entered in my DynDNS domain name for my router and saved off the cert for backup purposes. After my ISY rebooted to start using the new cert iLinc connected to my ISY without problems over 3G and local LAN using HTTPS (SSL).

One thing to check is that the external IP address that the ISY is entering into the host field for the SSL Cert generation is correct and is the same IP address iLinc is using to connect to your ISY for the SSL IP field.

Wes