Receiver Setup: Web Server - Leica GR10 Operational Manual

Operational Manual (Online Help)

Receiver setup: Web server

Background Information
In order to allow secure connections to your receiver web interface, the GR/GM web server is SSL (Secure Socket Layer)
capable. Enable HTTPS in order to activate an SSL connection.
After you have accepted the certificate, the SSL connection is established. A padlock icon is shown in many browsers
indicating that an SSL connection is being used.
What is SSL used for?
A common misconception is that SSL certificate's main purpose is to protect the data that is being sent over the
internet. But really this is just one of the features of SLL. Another main purpose of SSL is to certify your web site
identity by a trusted third party, meaning it proves that your website is actually what it claims to be – your web site. The
"trusted third party" who signed the SSL certificate, is the guarantee that a user is actually on your receivers web
interface and not some other site.
To see more information on the SSL certificate of a secure website, click on the
corners. This will open a pop up box showing information about the web site and the trusted third party that issued the
certificate.
For the standard SSL certificate on your receivers web interface, Leica Geosystems AG will be shown as the third
party that issued the SSL certificate.
How do I get an authorized certificate?
Certificates authorized by third parties can be free or cost up to $1,500 per year.
A large number of providers are selling SSL certificates, the 6 major SSL certificate providers are listed below. If you
buy a SSL certificate it will most likely be from one of these providers or re-sellers of one of them. All 6 do have
minimum 128 bit key encryption.
The primary SSL certificate providers are:
1.
•
Verisign
•
Thawte
•
InstantSSL
•
Entrust
•
Baltimore
•
Geotrust
2. Follow these steps to generate SSL certificate products:
1. Download & installation of openssl (Win32 OpenSSL v1.0.1e Light). Download link:
http://slproweb.com/products/Win32OpenSSL.html
2. Generate RSA private key: openssl genrsa -des3 -out domainname.key 2048
3. Remove pass-phrase / generate PEM format (Needed for "SSL key" field on web server config page):
openssl rsa -in domainname.key -out domainname.pem
4. Generation of the CSR (Certificate Signing Request): openssl req -new -key domainname.key -out
domainname.csr -config openssl.cfg
252
icon in one of the browsers