How to add https?

[K758-hoho]

How do you add https securely to a copyparty server running on Windows 10? Do you need to buy a domain to add https or use cfssl?

[8ARTEZZIO]

Hey! You don’t really need to buy a domain unless you want like a real HTTPS cert, but self-signed also works

Here’s kinda what I did:

1. I made certs with OpenSSL, like openssl req -x509 -newkey rsa:4096 -keyout key.pem -out cert.pem -days 365 -nodes
2. Then in Copyparty you just point it to those files (in config or command line, I think it’s --ssl=cert.pem,key.pem)
3. Restart server and it should be https now
4. Browser gonna show a warning (self-signed stuff), just click through

If you want no warnings, then yeah, domain + Let’s Encrypt is better, but for local or just you it’s fine

Hope this helps, I’m not expert but that’s what worked for me!

[K758-hoho]

Oohhh, nice.

Gonna try that soon. I'll let you know if it works :)

[K758-hoho]

Btw, how did you install openssl?

[TimmBmn]

The --ssl flag doesn't exist for me. If i set the flag the server wont start. Do you know why this is happening?

[8ARTEZZIO]

Oh, for me it was already on Linux, but on Windows I think you can just grab the installer from slproweb.com
Or, if you got WSL (Windows Subsystem for Linux), you can just do sudo apt install openssl
Either way, once it’s installed, just run the commands in cmd, PowerShell, or your WSL terminal
Let me know if you get stuck somewhere!

[K758-hoho]

Thanks for the info!

I opened openssl using an Ubuntu distro in WSL and i got step 1 working so far (entered the command successfully and answered some location-based questions), but when I entered the command --ssl=cert.pem,key.pem in Copyparty, the command wasn't valid, with the logs saying it's an ambiguous option and suggesting other commands like --ssl-ver, --ssl-dbg, --ssl-log. I think that's also TimmBmn's problem too.

How did you get yours working?

Also, do u know how to apply this to a config file?

[TimmBmn]

Yes I have the same issue.

But i found this comment:

copyparty/contrib/systemd/copyparty.service

Line 53 in d357ff0

## user to run as + where the TLS certificate is (if any)

Maybe we have to set an environment with the certs

[TimmBmn]

I think i've found an answer. The --cert flag lets to point to the path of a certificate. I found it with python copyparty-sfx.py --help | grep cert.

After i copied the contents of key.pem into cert.pem the server started without the sing default TLS certificate; https will be insecure: warning.
I still get the

could not create TLS certificates: [Errno 2] No such file or directory: 'cfssl'
install cfssl if you want to fix this; https://github.com/cloudflare/cfssl/releases/latest

warning but i think this can also be disabled. I get my certs from certbot and my domain so i think this warning is irrelevant for me.