Admin page access - certificate for https needed

Hello,

Thank you for the update to V6. The update process ran fine.
Unfortunately, every browser on every device complains that the admin page reports a certificate error.

I don't need https in my home network. How can I change that in the configuration?

Second question, more of a wish. I would like a reboot/restart button in the system settings. I've been using Pihole for a few years now and it's definitely necessary to restart the Pi every now and then.

Thank you.

You could follow this to bypass the warning TLS/SSL - Pi-hole documentation
or go back to using http://IPaddress/admin since you're using in your home network

1 Like

It's not my intension to install a certificate on every browser and device I use.
Honestly this is no user friendly way for users.

http://IPaddress/admin doesn't work.
It forwards the browser to https://IPaddress/admin and I get the same security alert again.
Any idea ?

1 Like

I have my domain and SSL cert.

https://mydomain:8443/admin
http://192.168.0.3/admin

When I try the second, it does not redirect, but instead recommend upgrade to https

have you try diff. browser?

v6 create a self-signed cert. You just have to add to your browser and that's it. Follow the above documentation

1 Like

I use the current Firefox 135.0.1. and alternatively MS Edge, also current.

Firefox redirects me to the https page. Edge reports http://myipaddress/admin is not reachable.
On my mobile (Pixel, A15) Chrome brower denies both http and https requests.

And yes, I replace with the IP of the PI on which Pi-hole is running.

Why have you made it so complex for normal users? It's relatively pointless to install an application certificate on every browser?
No matter which PC/notebook/tablet/mobile I use, I'm always forced to install this certificate. That may be logical, but it doesn't make sense.

Once again: How does Pi-hole accept an http port or page request?

I'm just a regular user and trying to help. Your question should be directed to the Mod and Dev. Anyway, you might want to generate a token and posted, so Mod and Dev can help answer your question and resolve your issue.

Good Luck

Hi there, you have to check the configuration file /etc/pihole/pihole.toml and in particular the line:

port = "80o,[::]:80o,443so,[::]:443so"

Try to set it to:

port = "80,[::]:80"

and it should disable TLS.

1 Like

My Debug file.
https://tricorder.pi-hole.net/ECmrzaWI/

Did you read the announcment blogpost?

Looking at your debug log, I can see that the web server is listening on port 8080. This means one of two things:

  • You chose not to disable lighttpd when prompted
  • You have some other service running on the device that is utilising port 80.

You will be able to access the web interface via http://youripaddress:8080/admin

You can change the port to something else if you wish via the web interface or the config file as suggested by @tngl

1 Like

During the migration I chose to disable lighttpd as there is no more use to have in on the installation.
The installation runs on a Raspberry Pi with Pi-hole and Unbound. No more applications.

I made the changes advised by tngl but after a reboot I found this:
port = "80,[::]:80" ### CHANGED, default = "80o,[::]:80o,443so,[::]:443so"

It looks good for the moment but I believe you have to come to a better solution in the future.

I think the ### CHANGED just says you have changed the default value - so all fine if it works.

1 Like

That's... interesting. It should have, then, set itself to port 80 and not 8080.

Fortunately, a trivial fix.

This will be the one time upgrading switched from lighttpd to the built in web server of pihole-FTL, you wont get bitten again :wink:

hahaha ... I'm not scared :slight_smile:
I hope that the expected future update won't overwrite the settings again and again.

I'll also try a fresh installation as a have a few SD cards left.
Let's see what comes out of that.

Thank you for the support. I'll keep you posted.

1 Like

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.