I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • Fmstrat@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    2 days ago

    It is surprisingly easy to add a custom CA to phones and laptops. When I migrated to services using one with names like thisservice.lan I thought it would be a lot harder. I just have a generation script that makes a new cert and I throw it in NGINX.

    • rumba@lemmy.zip
      link
      fedilink
      English
      arrow-up
      5
      ·
      2 days ago

      Just don’t get too close to TV’s or streaming boxes. Wildly different levels of hell

      • Fmstrat@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        1 day ago

        Very true. I do have a let’s encrypt wildcard cert that I also use with internal IPs for instances like this. But most of my items don’t require that.

        • rumba@lemmy.zip
          link
          fedilink
          English
          arrow-up
          1
          ·
          37 minutes ago

          awesome, I just setup traefik / le on an old sort domain of mine and make everything inside support https.

          Honestly, I was hoping to add client only certs on my jellyfin and open it to friends an family, but none of their streaming devices support it.