Creating an ACME certificate for internal DNS over TLS in pfSense. What method do I chose depicted in the screenshot attached, Any other suggestions would be helpful. My domain is: myvmlab.net I ran this command: pfSense 2.7.2 It produced this output: don't know yet My web server is (include v…

Hello @mrvmlab , welcome to the Let's Encrypt community. :slightly_smiling_face: Please see: [image] Certificates for localhost - Let's Encrypt Sometimes people want to get a certificate for the hostname “localhost”, either for use in local development, or for distribution with a native…

This is not a case of wanting a certificate for localhost. This is a certificate for use with DoT, although I am not sure why an existing certificate cannot be used or why the challenge is not automated using Cloudflare. I don't know what the question really is, or how it relates to Let's Encrypt. …

[image] linkp: This is not a case of wanting a certificate for localhost. Yeah; I agree, but "... certificate for internal DNS ..." was perplexing me.

[image] Bruce5051: internal DNS ...resolver. Whether or not it serves local data won't affect needing a valid hostname and matching certificate for DoT. I use LAN subdomain wildcards exported from pfSense with the equivalent of a deploy-hook.

I was thinking of an internal test lab at a company that needs distributed DNS & TLS for testers.

@linkp I will try to keep this short I am running pfSense and I have DNS over TLS setup for external DNS. That works great. I see where I can also with in pfSense offer DNS over TLS to my internal clients ( HomeLab ) It is not working internally and the only results as to why it may be is due to a c…

Almost like that yet more of internal DNS over TLS forlocal LAN clients (homelab)

Just a (homelab) trying to get local internal LAN clients internal DNS to be DNS Over TLS

[image] mrvmlab: TLS Does need to be a certificate for TLS to be the public trusts? Do you desire it to use a certificate for TLS that is in the public trusts?

if it can use domain name like android you can just use plain LE certificate: if you need a certificate for RAW IP address: LE doesn't offer it now. For public IP I think there is commercial CAs that are willing to sell you some: zerossl by api and google trust service comes to mind

Help Creating an ACME certificate for internal DNS over TLS

Help

Bruce5051 April 29, 2024, 2:10am 14

@mrvmlab if you are looking for your own lab ACME CA see My own certificate authority - #10 by danb35

Topic		Replies	Views
Create a certificate for internal domian Help	8	420	June 25, 2025
ACME v2 / DNS-01 for non-public facing sites? Help	4	6102	March 14, 2018
Let's Encrypt for Internal-Only Web Management Help	13	34946	August 21, 2021
How to install lets encrypt certificate for pfsense router GUI Help	5	15935	April 13, 2018
Issue Intranet certs Help	13	1480	September 13, 2020

Help Creating an ACME certificate for internal DNS over TLS

Related topics