Server Certificates - Self Signed and LetsEncrypt Certificates for the LAN

How to use Certificates in the LAN? What are our options? We can use self-signed certificates, but we can also use public Let's Encrypt Certificates LOCALLY - in the LAN. In this video we will look at the options such as self-signed CA and Certificates, Let's Encrypt Server Certificates and Wildcard Certificates

0:00 LAN certificate options
0:49 self-signed CA and Certs
1:42 create a CA with XCA
2:03 create a signed Server certificate
3:07 exporting certificates and keys
4:46 distributing the certificates
7:11 how to use LetsEncrypt certificates in the LAN
9:35 Letsencrypt Wildcard Certificates in the LAN

[BrianThomas]

This should have a ton more likes than it does. Not many on YouTube have ever explained it like this before. Great job!

[graceoverall]

12:25 Brilliant!!! I didn't know about transparency laws requiring the disclosure of private certs. For me, that's a deal breaker for my (future) homelab.

[AlexCernat]

congratulations for sharing info about certificate transparency program; many people are not aware about it, and some will have a big unpleasant surprise one day (hostnames disclosure, funny "test" dns names etc.)

[glitchy_weasel]

Let's Encrypt is a fantastic project! It definitely makes the internet more accessible and secure for hobbyists webmasters. Very good explanation by the way!

[alfonsofujita]

Waoo. The first video that explains me how let’sencrypt ask DNS for verification.
This video is for newest like me.
Thanks

[BobLoblaw_]

Great explanation and great video (series)! Thanks!

[rklauco]

I did not realize you can use the wildcard certs like this in LAN. Good idea...

[yitspaerl]

Very interesting. Especially using a free wildcard cert locally. Thanks a lot!

[Benemortasia]

That application/database program I am using ever since, its awesome. Thank you.

[_rf]

Thanx Marc! I personally found the best option to automate let's encrypt wildcard cers is to maintain your own dns servers. It allow you to make any number of subdomains with DNSSEC and all the stuff.

[rsmonteiro]

Thanks Marc! The way you explain the thing is excellent!

[pberto]

I can only confirm my comment on part 1. Good job, Marc.

[bqxfqju]

Very nicely explained. Thanks a lot for your efforts.

[pallzoltan]

I love how well you explained everything. Thank you.

[affinitystablepeanuts]

Very nice and very clear explanation around letsencrypt. Thank you. Deserves a lot more likes.

[justpassing]

well served solutions for everyone. Great job!

[alexs]

Great video Marc, always extremely informative thank you!!! Would you ever consider revisiting the BATMAN protocol in depth? Such as with DSA architecture or APs with no built in switch?

[daxelai]

Excellent explanation.
Actually I am using tomcat server on my LAN to deployed my application. In this video we downloaded two certificate and key can I use only key and ca certificate or key with certificate to configure https in tomcat.

[fef-ek]

great video quality, great content, great tool and of course great explanation. I have downloaded the XCA software on my windows 10. I have a lil challenge: I am working with vs code and have accessed my server via it. I have also created my CA with XCA. the challenge i have now is copying my CA to the server just like you did. Any guide?

[jogikuenstner]

Interesting, great content!
I happen to use the same webspace-provide like you, but I have enabled 2FA with an authenticator-app.
Do you see any chance then still to do automation?