Internal SSL validity error when accessing services from within my
home network
reddit / selfhosted

----------------------------------------------------------------------
MrKrypticfox · 2023-12-29 06:07

I have an external facing instance of Nextcloud and several internal
facing services all behind Nginx Proxy Manager.  I have a wildcard
certificate for my domain (*.my-domain.com), which I received from
LetsEncrypt through Nginx Proxy Manager. The SSL certificate works
great for the external facing service but all of the internal services
give me an invalid name validity error. The internal services are
running on *.local.my-domain.com so they should be covered by the
wildcard cert at the root level. What am I missing? How can I fix this
validity error?

----------------------------------------------------------------------
bz386 · 2023-12-29 06:29

Wildcard certificates only cover the first level under the domain, so
something.example.com would be covered while so else.local.example.com
would not. You need a wildcard certificate for *.local.example.com

----------------------------------------------------------------------
MrKrypticfox · 2023-12-29 12:49

Got it. What is the best way to get a wildcard cert for the
*.local.example.com without exposing local.example.com?

----------------------------------------------------------------------
bz386 · 2023-12-29 12:54

Use the LetsEncrypt verification method where you place a specific TXT
record into DNS. This doesn’t require that your server is reachable at
all, but it does require that you DNS is handled by a provider ho can
do dynamic updates, like Cloudflare.

----------------------------------------------------------------------
MrKrypticfox · 2023-12-29 13:28

That worked!  Thanks for the help!