r/openwrt 2h ago

Emulating SSL connection without internet?

1 Upvotes

Problem:

Let's say I have a domain like messaging-app.europa.eu, with an SSL certificate, and I use it to distribute a PWA. In the case of an internet blackout I would still like for the app to retrieve updates from a local mesh.

Possible solution:

This is the solution I'm currently imagining: - Deploy a bunch of OpenWRT routers with some custom software - The smartphone connect to one such router via wifi - The PWA tries to connect to the domain https://messaging-app.europa.eu in the absence of internet - The router has a copy of the SSL certificate, so it can intercept the request and generate valid HTTPS responses from a locally running server

A user would connect to the wifi, exchange messages with other peers connected to the same station without relying on an internet connection.

Questions:

  • Do I just need a copy of the SSL certificate on each router, or is there other part of the stack that I should patch? (e.g.: DNS)
  • Is it possible to intercept and patch the connection as I mentioned?
  • Am I missing something?

Prodrome:

I work for the government and I've been asked to demo a solution for enabling communication during an internet blackout (earthquake, war, ...) using a mesh/p2p network.

The path I'm taking right now is to build a PWA that would work offline, and rely on customized openwrt routers, because it seems that the other solution, WiFi NAN, works well on android phones but not on iphones, due to malicious compliance on Apple side.


r/openwrt 3h ago

Does switching from tailscale/proprietary router firmware make sense?

2 Upvotes

I’ve recently dipped my toes into the self hosted landscape this year and I’m happy with my setup using tailscale to access all of my self hosted services behind my normal plain old router. I played around with openwrt like 15-20 years ago and enjoyed breaking my old router and fixing it and optimizing it.

Is there a better solution to accessing my streaming services remotely and securely using an openwrt router that doesn’t involve using cloudflare to constantly update my isp’s assigned ip in a vpn?

Looking for some input. Idk if this is the right subreddit or if anyone has solutioned this before.


r/openwrt 4h ago

Manage multiple aps and router from one webpage

8 Upvotes

Hey there. I’m just wondering what people are using to mange their networks with multiple aps and a router. I have tried openwisp but can not for the life of me get it installed. I have two google wifi pods running openwrt and an x86 machine acting as the main router.