Let's Encrypt - Internal Servers

[mdrabble]

I'm currently installing a Unifi Controller so I can test a couple of Unifi APs with the guest portal etc.

 

Since the Sever is internal and uses https, I need a SSL cert, so I thought I would use Let's Encrypt.

 

I have managed to get a SSL manually using the DNS challange, but this will need redoing manually before the 90 renewal time.

 

Has anyone use uses Lets Encrypt managed to get renewals automatically using the DNS challenge - or alternatively, can you let me know how you do SSL internally using certificates.

 

Cheers

[Arthur]

The following article may help?

 

www.naschenweng.info/2017/01/06/securing-ubiquiti-unifi-cloud-key-encrypt-automatic-dns-01-challenge

[synaesthesia]

Surely as only yourself/admins are using it, you could either use a self-signed certificate and install it on the admin machines, or don't bother at all? We havent

[mdrabble]

I was thinking more for the guest portal, - have left off the https options within the portal and that seems to work fine, so think I will leave as it.

[smarties11]

I was thinking more for the guest portal, - have left off the https options within the portal and that seems to work fine, so think I will leave as it.

 

If your users are entering their credentials in the guest portal to authenticate, then this is a bad idea - no https means their credentials will be being transmitted in clear text.

[Roberto]

If your users are entering their credentials in the guest portal to authenticate, then this is a bad idea - no https means their credentials will be being transmitted in clear text.

 

Have to agree with this. I suppose you can say it's a matter of deciding what the risk is to you and making a choice based on that rather than doing it based on dogma, but for our environment this would be very bad indeed.

[mdrabble]

Decided to stick with the current solution which is Radius Authentication and to avoid the guest portal altogether for users.

 

Will only be using the Guest Portal for visitors and they will be using Voucher Codes.