Original subtitles

Okay now that we got everything working properly you seen in the previous lecture when someone connects

to our fake access point now they'll automatically see Logan page that is our fake logon page.

Also if they try to go to any other Web sites they'll be redirected to my logon page and they'll also

see a bar at the top of the browser telling them that they need to log in which is all looks perfect.

The only one issue that we have right now is if the person tries to go to a web page that uses hate

as ts like Facebook Google Twitter and all of them they will see a message saying that the browser couldn't

establish a secure connection because the browser knows that this website needs to use TTP as now to

fix this issue.

We need to enable hasty CPS on our own browser on our own web server.

So I've already started Apache and if I just open my web browser here and just go to my local host so

my local host is usually at 1 2 7 0 0 1 you'll see I have my dog page that my targets See the thing

is now if I go here and put TTP as

you'll see that the page will just not get displayed even for me even though I'm a local user and this

is because Apache is not configured to handle Hastey CPS so in this lecture I'm actually not even going

to use the fake access point.

What I'm going to show you is how to enable TTP as an Apache and you'll see how that will automatically

fix the problem that we used to have.

So the first thing that we need to do to use a shitty piece is to generate a hasty type certificate

so to generate HTP certificate we're going to use open SSL.

We're going to tell it that we want to create a request and this is going to be a new request and we

want this request to follow the 5 0 9 structure because that's actually required.

We're going to set the number of days that this certificate will be valid for.

So we're going to set it to be valid for a whole year.

Then we're going to set the location where we want the certificate to be stored.

And I'm just going to store it in road downloads fake AP and I'll just call it cert that PM.

Now you'd want to save this usually in ATC but for me for now since I have all my files for the fake

access point in root download fake access point I'm just going to leave it in there.

We're also going to specify the location where the key for the certificate should be stored.

And that's going to be key out.

And again I'm going to put it in Rood downloads fake AP sarod and we'll call this the key.

OK so there isn't a very simple command where do an open SSL with on it that we need to make request.

This request is a new request that's going to create a certificate that follows the XO nice structure

the certificate.

I want it to be valid for 365 days.

I want you to store the certificate in root downloads.

Fake AP sarod.

And I want you to store its key in root downloads.

Fake AP sarod dot key.

I'm going to hit enter and this should actually be days not day

now it's asking me to set a passphrase for the certificate.

So I'm just going to set it right now.

You might notice that nothing is being displayed on screen but I've actually typed it and that's just

a security feature.

So just type it in here and enter and type it again.

And that's done now it's asking me for the country.

I'm just I'm just going to set it to IP for Ireland.

Askin me for the states I'm going to set it to Dublin City again I'm going to set it to Dublin.

Company name so we'll just call it Microsoft

we'll call this the unit we'll call it networking

this is usually set to the domain name or the cert is going to be used for us.

We're just let's just call it royal because our network is called Royal Wi-Fi.

Email address so we'll just send this to anything so let's just say info.

Microsoft dot com

and that's it now our certificates should be created so if we go to downloads

and fake AP you'll see that we have the search key and the search to do it.

PM Now we have the certificate ready and you can actually use the certificate with a lot of things and

a lot of web servers.

So generating the certificate is always the same.

And then you want to integrate the certificate with the service that you want to use.

So in our case we want to use that with apache so we can support TTP s and I'm going to show you how

to do that in the next lecture.