Skip to main content

New answers tagged

-2 votes

How did I obtain a wildcard SSL certificate without port 80 opened for a challenge?

If this is only for your internal needs ("my apps running in a private subnet") then you can use mTLS (mutual TLS). You generate own CA certificate, then generate Client/Server certificates ...
i486's user avatar
  • 143
11 votes
Accepted

How did I obtain a wildcard SSL certificate without port 80 opened for a challenge?

The ACME protocol doesn't use the HTTP-01 challenge when issuing wildcard certificates, because this challenge only proves you control the host behind a single domain. For wildcard certificates, you ...
Ja1024's user avatar
  • 11.3k
2 votes
Accepted

Using mTLS for API access control and authentication

Client certificate authentication should give you strong assurance that the client is whom they claim to be (as specified in the certificate subject or through the Subject Alternative Name extension). ...
Ja1024's user avatar
  • 11.3k
0 votes

Should I change the private key when renewing a certificate?

Old topic - but an important aspect not covered here is that a "renewal" can generally be actioned within a 90 day window - from 60 days prior to 30 days after expiry. Ref: https://ie....
Simon Burbery's user avatar

Top 50 recent answers are included