Notes for TP-Link WR703N v1-SN1_5-Patch-02-inc ---------------------------------------------- This patch adds security facilities for the web server as follows: 1. Basic Authentication using accounts in the /etc/passwd file. Accounts 'root' and 'admin' are provided, each with default password of 'admin'. 2. Fallback IP address - the web server will only listen on the Fallback IP address 172.31.255.254 with netmask 255.255.255.252. Requesting device must have address 172.31.255.253 3. Enable SSL - web server will listen on port 443. URLs of the form https:// These security settings are enabled from three checkboxes on the Basic SECN web page. Changes to these settings are not activated until the device is rebooted. When logged in as a particular user (i.e. 'root' or 'admin') the Set Password function will change the password for that account. The /etc/init.d/set_hostname.sh script has been altered to use the lan ip address and to write the hostname into the SSL certificate generation section of /etc/config/uhttpd as the 'commonname'. This ensures that the certificate is recognised as a valid self signed certificate, although with no traceability to a recognised Certificate Authority. Files changed in this patch include: - /www/configstyle.css - /www/cgi-bin/secn and secn-adv - /www/cgi-bin/config/config1.sh, config2.sh, config4.sh, config5.sh - /www/cgi-bin/config/html/config1.html and config4.html - /etc/config/secn and config.tar.gz - /etc/init.d/config_secn - /etc/init.d/set_hostname.sh - /etc/http.conf and http.conf.off - /etc/passwd - /etc/banner