I know that I can simply make my own private certificate authority that only I and my family trust. But is there some public provider like letsencrypt that is in a free-er part of the world than the US?

  • Fmstrat@lemmy.world
    link
    fedilink
    English
    arrow-up
    3
    ·
    4 days ago

    It is surprisingly easy to add a custom CA to phones and laptops. When I migrated to services using one with names like thisservice.lan I thought it would be a lot harder. I just have a generation script that makes a new cert and I throw it in NGINX.

    • rumba@lemmy.zip
      cake
      link
      fedilink
      English
      arrow-up
      5
      ·
      4 days ago

      Just don’t get too close to TV’s or streaming boxes. Wildly different levels of hell

      • Fmstrat@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        3 days ago

        Very true. I do have a let’s encrypt wildcard cert that I also use with internal IPs for instances like this. But most of my items don’t require that.

        • rumba@lemmy.zip
          cake
          link
          fedilink
          English
          arrow-up
          1
          ·
          2 days ago

          awesome, I just setup traefik / le on an old sort domain of mine and make everything inside support https.

          Honestly, I was hoping to add client only certs on my jellyfin and open it to friends an family, but none of their streaming devices support it.

          • Fmstrat@lemmy.world
            link
            fedilink
            English
            arrow-up
            2
            ·
            1 day ago

            Yea, I’ve recently learned LineageOS has an AndroidTV version that runs on a lot of devices, including the Pi. Been considering investigating that.