nextbox icon indicating copy to clipboard operation
nextbox copied to clipboard

Implement other TLS certificate deployments

Open daringer opened this issue 4 years ago • 5 comments

  • [ ] allow enabling TLS with own certificate
  • [ ] allow DNS TXT record validation instead of web-challenge (might be covered by the own cert already?)
  • [ ] allow using arbitrary "static domain" to allow LAN only arbitrary hostnames

daringer avatar Jul 06 '21 20:07 daringer

Is there anything I can do to increase priority for DNS TXT record validation?

fire avatar Jul 10 '21 20:07 fire

Low-prio means "not planned for the next major" release (1.1), we can clearly consider this for 1.2 then. Further you could check: https://support.nitrokey.com/t/nextbox-herunterfahren-und-zertifikate/3199 (even if in German) it describes roughly how to set up an own certificate, this might be a workaround for you until then

daringer avatar Jul 11 '21 21:07 daringer

Ah, I'll check back in two weeks.

I don't understand German. I don't know how to read that page.

fire avatar Jul 11 '21 22:07 fire

There are various possibilities to translate to english, inside chrom-ish browsers just a right click and "translate to english" or you could use one of the various web-translators.

daringer avatar Jul 12 '21 11:07 daringer

this is partly solved by the current approach for "guided dns configuration", acquiring a certificate works using a DNS-verification.

daringer avatar Jan 17 '22 23:01 daringer