About running https web server on not connected to internet devices

Help
1

I run my web server in an embedded environment, inside a device, needed for configuring device itself. I could have many devices.
My devices can be connected to internet or not, in any case I would like to use https only for connections. It's not clear to me how to manage certificates in this case. Maybe best solution is to always use self-signed certificates? Thanks for any answer.

My web server is (include version): jetty-9.4.25.v20191220;

The operating system my web server runs on is (include version): linux yocto

My hosting provider, if applicable, is: no

I can login to a root shell on my machine (yes or no, or I don't know): yes

I'm using a control panel to manage my site (no, or provide the name and version of the control panel): no

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot): no

2

I think that's really the only solution, if you need to account for devices that will never be connected to the Internet.

3 Likes
3

If you control both the client and the server, then yes using self-signed (or a small private CA) is probably the easiest approach. If you need to expose your servers to "general" users where you can't control their trust store, then you can use a public-trusted certificate like Let's Encrypt provides, but you'd need to use a real public hostname for the devices, and probably DNS authentication if the devices can't respond to public requests.

3 Likes
4

thank-you very much for useful answers!

2 Likes