Using Let’s Encrypt for internal servers (opens in new tab)

(blog.heckel.io)

3 pointsville5y ago1 comments

1 comments

I did something similar using AWS Route 53 and documented it here: https://linsomniac.gitlab.io/post/2019-09-10-letsencrypt-wit...

This setup creates an AWS key pair for each DNS name that can be used to prove to LetsEncrypt the ownership. So the machines in question, say dev workstations, can generate signed certs.

We used to use self-signed certs with long expiry times, but it is sounding like in the not too distant future there will be browser animosity towards long-lived certs.

j / k navigate · click thread line to collapse

1 comments

linsomniac5y ago

I did something similar using AWS Route 53 and documented it here: https://linsomniac.gitlab.io/post/2019-09-10-letsencrypt-wit...

This setup creates an AWS key pair for each DNS name that can be used to prove to LetsEncrypt the ownership. So the machines in question, say dev workstations, can generate signed certs.

We used to use self-signed certs with long expiry times, but it is sounding like in the not too distant future there will be browser animosity towards long-lived certs.

j / k navigate · click thread line to collapse