Install SSL for intranet server

[boka003]

Hello there,


I have installed KeyHelp at VPS in our internal network.

Lets Encrypt SSL is not working, maybe because it is our internal network (something like localhost).

https://prnt.sc/5b69hEq9N7tV
https://prnt.sc/BkyNrJbNbdZN


I have also tried to create a self-signed SSL, but it is not working too.


Do you have any idea how I can add a secure connection to the intranet site?


Regards

[Florian]

Hallo,

Let's Encrypt can only work if the Let's Encrypt Servers can reach your webserver. So have to make it accessible from the outside if you want to use Let's Encrpyt

It is normal that you get warnings when using a self signed certificate. What exactly is not working?

[boka003]

Hello,


For some reason, a self-signed certificate showing not secure connection: https://prnt.sc/baIbZu3aEjL-


Image from Chrome: https://prnt.sc/uIK8r5LqzltP


https://prnt.sc/ztoV1KZ-lh8Z
https://prnt.sc/fmZEvEYg2Mkn

[Alexander]

What did you expect?
A self-signed certificate cannot be trusted in general, because anyone can create such certificates. Would you trust a self-signed certificate created by some stranger from the Internet?

In every client computer / server / etc. there is a list of certificates that are considered trustworthy. The reason why, for example, a Let's Encrypt certificate is considered trustworthy is, that this type of certificate is signed / issued by a trustworthy Certificate Authority "whitelisted" on your client computer.
So if you want your own self-signed certificates to be trusted, you need to update all client computers / client servers etc. to trust your self-signed certificates.

[boka003]

Hello,

Is there any other solution for free secure SSL in the intranet?
Something like open ssl?


How we can use it inside Keyhelp?

[24unix]

If you can tell the reason to use a webhosting panel in an intranet, the answer might be easier.

KeyHelp is not for the admin, but to keep the users away from the admin …

Its to delegate boring stuff so the users can do it on their own.

So: Whats your goal?

[Alexander]

Is there any other solution for free secure SSL in the intranet?
Something like open ssl?

How we can use it inside Keyhelp?

You can also upload a certificate and its components (private key, certificate, ca-certificate) using the certificate management in KeyHelp and than assign it to the domains or server services you like. "Add SSL/TLS certificate -> Upload an existing certificate".

You just need to find a appropriate certificate which matches your hostname and is trustworthy. But this is not related to KeyHelp.

[Florian]

Hello,

https://dgu2000.medium.com/working-with ... 38486e6858

Here you can learn how to create your own CA, sign certificates with it and import it into a browser so that it is trusted.