3 ms·
I'm running Let's Encrypt certificates on services that are only accessible in my home network. And I live alone. I mean, why not? (Granted my certs actually
by Hamuko 6y ago
I'm running Let's Encrypt certificates on services that are only accessible in my home network. And I live alone.
I mean, why not?
(Granted my certs actually failed earlier this week since my automation had broken)
- xtracto 6y agoOne problem with Let's Encrypt certs only work for public domains.
- MaxBarraclough 6y agoIs that really a problem though? Just create a dummy public-facing page.
- NovemberWhiskey 6y agoRight; technically the ACME protocol itself could be implemented on a private network, but honestly it has a whole mess of complexity because it's designed around the assumption that the requester and the issuer are arms-length counterparts.
- remram 6y agoYou can verify ownership of a domain via DNS [1], so you don't need the IPs in the A/AAAA records to be publicly accessible. Or be public IPs. Indeed you don't even need those A/AAAA records to be available from your DNS server from the internet. You do need a domain though. [1]: https://letsencrypt.org/docs/challenge-types/#dns-01-challenge https://letsencrypt.org/docs/challenge-types/#dns-01-challen...