<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<p><br>
</p>
<br>
<div class="moz-cite-prefix">On 09/12/2017 13:18, Dan Langille
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:39EE0167-D64B-4411-AD87-A83C9D77D9AD@langille.org">
<meta http-equiv="Content-Type" content="text/html;
charset=windows-1252">
<div>
<blockquote type="cite" class="">
<div class="">On Sep 12, 2017, at 1:10 PM, Mark Saad <<a
href="mailto:mark.saad@ymail.com" class=""
moz-do-not-send="true">mark.saad@ymail.com</a>> wrote:</div>
</blockquote>
<br class="">
<blockquote type="cite" class="">
<div class="">
<div class="">
<div style="font-family:Helvetica Neue, Helvetica, Arial,
sans-serif;font-size:16px;" class="">
<div style="font-family:Helvetica Neue, Helvetica,
Arial, sans-serif;font-size:16px;" class="">one issue
i've had with let's encrypt is trying to use it on
private <br class="">
subdomains on AWS. iirc the system needs to have a
public DNS entry as <br class="">
well as access from the internet to work - i might be
mistaken tho on <br class="">
this...<br class="">
</div>
</div>
</div>
</div>
</blockquote>
</div>
<div class=""><br class="">
</div>
I have LE certs for RFC 1918 addresses. The DNS server I use to
validate is a public DNS server, but where
<div class="">you user the cert is not relevant.<br class="">
<div class=""><br class="">
</div>
</div>
</blockquote>
<br>
ah i hadn't thought of that - basically having a bastion host
wrangle getting new certs, then you deploy the to the appropriate
backend after the CSR is fulfilled? does the the public server
announce the rfc1918 address for a given host, or does it use a
dummy public ip?<br>
<br>
thx!<br>
-pete <br>
<br>
<blockquote type="cite"
cite="mid:39EE0167-D64B-4411-AD87-A83C9D77D9AD@langille.org">
<div class="">
<div class="">
<div class="">
<div>-- <br class="">
Dan Langille - BSDCan / PGCon<br class="">
<a href="mailto:dan@langille.org" class=""
moz-do-not-send="true">dan@langille.org</a><br class="">
<br class="">
</div>
</div>
<br class="">
</div>
</div>
</blockquote>
<br>
<pre class="moz-signature" cols="72">--
Pete Wright
<a class="moz-txt-link-abbreviated" href="mailto:pete@nomadlogic.org">pete@nomadlogic.org</a>
@nomadlogicLA</pre>
</body>
</html>