eHow launches Android app: Get the best of eHow on the go.

How To

How to Securely Use uTorrent's WebUI with SSL

Member
By Dominik Faust
User-Submitted Article
(0 Ratings)
WebUI of uTorrent downloading Ubuntu.
WebUI of uTorrent downloading Ubuntu.

uTorrent is a Bittorrent client with a nifty feature. As of version 1.8.3, the proper configuration can give you easy access to your torrents from any location in the world. This is perfect for the traveler who has just too many torrents to carry with him on his laptop or USB flash drive.


So keep your 1 terabyte worth of torrents on your home server. With Stunnel, OpenSSL and WebUI, I'll show you how to safely access your torrent's from afar.

Difficulty: Moderately Challenging
Instructions

Things You'll Need:

  • Latest uTorrent installed
  • Internet connection
  • Access to your router
  • Administrator privileges
  1. Step 1
    Configuring WebUI's Authenication and Listening Port.
     
    Configuring WebUI's Authenication and Listening Port.

    Configuring WebUI:

    In Options -> Preferences -> WebUI, check "Enable WebUI".



    Choose a long username and password. Just think of them as two passwords.

    Don't bother changing the listening port. We can safely use the typical listening port in Options -> Preferences -> Bittorrent.

  2. Step 2
    Stunnel is easy to install and configure.
     
    Stunnel is easy to install and configure.

    Installing Stunnel:

    Visit Stunnel.org's webpage for Windows binaries (in Resources) and download the latest version. I'm using version 4.27.

    Install the program to "C:\Program Files\stunnel\".

  3. Step 3
    Stunnel's configuration file.
     
    Stunnel's configuration file.

    Configuring Stunnel:

    Open "C:\Program Files\stunnel\stunnel.conf" and delete the semicolons at the first space of each line in the [https] block under Service-level Configuration.


    Change the value of "accept" to any large unused port. This is the port Firefox uses to communicate with Stunnel.

    Change the value of "connect" to uTorrent's listening port in Options -> Preferences -> Connection. This is the port Stunnel uses to communicate with uTorrent.

  4. Step 4
    PortForward.com's banner.
     
    PortForward.com's banner.

    Port Forward Stunnel's Accept Port:

    Since this is the port that Firefox connects to, it will need to be forwarded. Follow the instructions for your router at PortForward.com (in Resources). This should be similar to forwarding uTorrent's listening port, which you should have already done!

  5. Step 5
    OpenSSL creates certificates.
     
    OpenSSL creates certificates.

    Installing OpenSSL:

    Stunnel contains a file called stunnel.pem in "C:\Program Files\stunnel\" that contains the default private key and certificate that everyone gets. It is obviously unsafe to use, so we should replace it with a unique file. We will use a compilation of OpenSSL for 32-bit Microsoft Windows (Win32) for this.

    Visit Shining Light Productions's webpage for Win32 OpenSSL (in Resources) and download the latest version. If necessary, download the Visual C++ Redistribution Package as well.

    Install Win32 OpenSSL to "C:\OpenSSL\".

  6. Step 6
    Generating a unique key and a certificate.
     
    Generating a unique key and a certificate.

    Creating a Certificate and Private Key:

    Open "C:\OpenSSL\bin\openssl.exe", a command-line interface for OpenSSL.

    Type this command into the prompt:

    req -new -x509 -days 365 -nodes -config openssl.cfg -out "C:\Program Files\stunnel\stunnel.pem" -keyout "C:\Program Files\stunnel\stunnel.pem"

    This overwrites "stunnel.pem" and basically creates a certificate valid for one year.

    Enter in the necessary information (or just random data) for the certificate.

  7. Step 7
    Create a bookmark to easily log in.
     
    Create a bookmark to easily log in.

    Testing!:

    Create three bookmarks in Portable Firefox on a USB flash drive:


    1) trivial: https://[username]:[password]@127.0.0.1:[st accept port]/gui/
    2) local: https://[username]:[password]@[local ip]:[st accept port]/gui/
    3) external: https://[username]:[password]@[external ip]:[st accept port]/gui/

    You should be able to connect to uTorrent using all three bookmarks on the local machine, bookmarks 2 and 3 on any other machine inside the LAN (i.e. behind the same router), and just bookmark 3 outside the LAN. There is a nice picture in the resources to visualize this.

    It is sufficient to test all three ways on the local machine. Download a certificate for each address.

    Examples of each:

    1) https://iLcrfd4i:O9UhjD8K@127.0.0.1:25846/gui/
    2) https://iLcrfd4i:O9UhjD8K@192.168.1.9:25846/gui/
    3) https://iLcrfd4i:O9UhjD8K@72.14.213.99:25846/gui/

Tips & Warnings
  • Copy and paste into WebUI's password field under Authentication to avoid misspellings, since there is no confirmation field.
  • The username and password should be long enough to avoid successful brute force attacks.
  • Stunnel acts as an intermediary between you and uTorrent. It will accept a request through one port and link you to uTorrent through another. The two ports cannot be the same.
Subscribe

Post a Comment

Post a Comment

Related Ads

  • Have you done this? Click here to let us know.
I Did This
Get Free Computers Newsletters

Copyright © 1999-2009 eHow, Inc. Use of this web site constitutes acceptance of the eHow Terms of Use and Privacy Policy .   en-US Portions of this page are modifications based on work created and shared by Google and used according to terms described in the Creative Commons 3.0 Attribution License. † requires javascript

eHow Computers
eHow_eHow Technology and Electronics