HTTPS connection ibaCapture and Axis camera

This is not an official guide

~ using ibaCapture 5.7.0 and Axis P1468-LE Bullet camera

Before

- create a folder in your C drive where we can save all the files

- install OpenSSL: https://openssl-library.org/source/

Step 1: In the Axis camera

I. Navigate to your Axis camera using a browser (ex: 192.168.140.67) and go to:

1. System
2. Security
3. Add certificate
4. Create a self-signed certificate request and signing request
5. Click "Next"

II. Fill in the empty fields:

1. Name
2. Common name: take the IP address of the camera
3. Valid thru (years)
4. Country (C): 2 characters e.g., BE = Belgium
5. More: (optional: city, state etc.)
6. Choose "Next"
7. Click "Save"
8. Click “Close”

III. Navigate to your certificates:

1. Click the 3 dots of the certificate you just made
2. Select "create certificate signing request"

IV. Create certificate signing request:

1. Fill in the country (2 characters)
2. Optional: city, state etc.
3. Click "save"

V. Copy the certificate signing request (PEM format) to notepad and save it as “request.ext” in your folder

Step 2: In ibaCapture

VI. Open ibaCapture and go to:

1. Configure server
2. *your server*
3. Service
4. Certificates
5. Generate a certificate
6. Click the 3 dots, fill in a password and click “OK”
    (don't forget the password, you'll need it multiple times)
7. Click “OK”

VII. Generate private key:

1. Select the certificate
2. Click "Export the selected certificate to a file"
3. "do you want to export the private key for the certificate" select "Yes"
4. Enter the password you created and click “OK”
5. Navigate to your folder and save the file as "private.pem" 

VIII. Generate public key:

1. Select the certificate
2. Click "Export the selected certificate to a file"
3. "do you want to export the private key for the certificate" select "No"
4. Navigate to your folder and save the file as "public.crt"

Step 3: In your folder

authorityKeyIdentifier=keyid,issuer

basicConstraints=CA:FALSE

keyUsage = digitalSignature, nonRepudiation, keyEncipherment, dataEncipherment

subjectAltName = @alt_names

[alt_names]

IP.1 = 192.168.140.67

X. PowerShell command

NOTE: If your screen looks like the image below, it worked!
Possible errors are:
- missing files
- OpenSSL not installed
 - passphrase wrong

Step 4: Back in the Axis camera

XI. Navigate to your Axis camera using a browser (ex: 192.168.140.67) and go to:

1. System
2. Security
3. Add certificate
4. Upload a client-server certificate using a signing request
5. Click "Next"
6. Fill in the exact name of the certificate you generated in the camera before
7. Select the axis_camera.crt from in your folder 
8. Click "next" and "finish", you should get a success message

XII. Activate certificate

1. System
2. Network
3. HTTP and HTTPS
4. Change the "allow access through" from "HTTP" to "HTTP and HTTPS"
    (you can later change it to only HTTPS if the connection works)
5. Select the certificate you created and click "save"

Note: check if the HTTPS port of the camera can be reached:

Open PowerShell and paste (change IP and port):
test-netconnection 192.168.140.67 -port 443 

Check firewall rules if necessary!

Step 5: Back in your folder

XIII. Install certificate on local machine

1. Open the file "public.crt"
2. Click "install certificate..."
3. Click “Local Machine”
4. Click “Next”
5. Select "place all certificates in the following store" 
6. Select "trusted root certification authorities" 
7. Click "OK" 
8. Click "Next" 
9. Click "Finish", "OK" and "OK" 

OPTIONAL: add certificate in Google Chrome so you can enter the camera using HTTPS

XIV. Open Google Chrome

1. Go to chrome://certificate-manager/localcerts/usercerts
2. Click “Import” under “Trusted certificates”
3. Select “public.crt”
4. Click “Open”

Step 6: Back in ibaCapture

XV. Open ibaCapture and go to:

1. Click "Add new camera"
2. Select "Axis" and click "next"
3. Fill in the camera credentials (protocol HTTPS) and click " check camera access"
4. You should get a "Login successful" message

You now got a secure connection between ibaCapture and an Axis camera.

EXTRA:

i-PRO Panasonic HTTPS connection:

• Generate Root_CA in OpenSSL of XCA
• install the generated root_CA In the webconfig of the camera and generate a request file (.csr) 
• Use the .csr file in openSSL of XCA to generate a certificate (.p7b)
• Import this .p7b in windows Certification Store 
• Export the .p7b from in the Windows Certification Store to a base-64 encoded X509 .CER’ file.
  (The .p7b file can't be imported in the camera. You need a .cer file)
• Import the .cer file in the camera
• Import the .p7b file into ibaCapture