3 ms·
My cameras are internally accessibly via https. Every time I open a browser I need to click two buttons to get past the certificate error. Sure I could configu
by sschueller 1y ago
My cameras are internally accessibly via https.
Every time I open a browser I need to click two buttons to get past the certificate error. Sure I could configure a real domain, do split DNS and get a certificate but these cameras require manual uploading a certificate. I would need to do this every three months for every camera and eventually even more frequently.
- arccy 1y agoand IP certs would help how? you'd have to upload every 6 days. just run your own CA with ~infinite lifespan.
- throw0101c 1y agoThere are numerous tutorials on running your own private certificate authority (CA): * https://smallstep.com/blog/private-acme-server/ https://smallstep.com/blog/private-acme-server/ ; https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi-yubikey/ https://smallstep.com/blog/build-a-tiny-ca-with-raspberry-pi... * https://openvpn.net/community-resources/setting-up-your-own-certificate-authority-ca/ https://openvpn.net/community-resources/setting-up-your-own-... * https://www.digitalocean.com/community/tutorials/how-to-set-up-and-configure-a-certificate-authority-ca-on-debian-10 https://www.digitalocean.com/community/tutorials/how-to-set-... Import the CA's root cert on your browsing devices and anything it issues will be trusted.
- cpach 1y agoGood idea. In Firefox, one could have a separate profile for this, so that the CA cert is not imported in one’s general profile. Another option could be to put the cameras behind a reverse proxy (e.g. Nginx or Envoy) and terminate TLS there.