I have an old Foscam camera that only supports http

[G+_Jason Brown]

I have an old Foscam camera that only supports http. Does anyone know of a way to add https through third-party firmware?

[G+_Andre Couture]

They only way I managed to do so was to add a proxy server in front that would accept https on the public side and forward to http on the private lan.

[G+_Ben Reese]

I assume this is for remote access?

I don't know of any 3rd party firmware for Foscam cameras, but I'm sure it varies by model number. I found this that will let you extract the firmware: https://irishjesus.wordpress.com/2010/03/30/hacking-the-foscam-fi8908w/

It looks like he's targeting the FI8908W, but there's a chance his C-Code would work for firmware from other models too. Perhaps there's a way to repackage it with OpenSSL?

 

As Andre Couture said, a reverse proxy would probably be the best approach. Then you could take advantage of other security features like failtoban.

 

Really, a VPN may be your best option. That would require authentication before you even get to the web interface preventing other firmware vulnerabilities from causing issues. Using one of the popular scripts, OpenVPN is extremely easy to setup on either a Raspberry Pi, a spare Linux machine, or a VM. The $5 Raspberry Pi Zero would be good for this if you've got a Windows PC it can tack on to...

[G+_Jason Brown]

It's going to stay local. No remote access needed. It's just the principle for me.

[G+_Jason Davis]

I used blue Iris which is paid, but it become the interface for all the cameras handling the motion detection. And recording. Then I block all my cameras from the web since only the blue Iris computer needs to talk to the cameras.