I am currently experimenting with a local server running apache / owncloud. Eventually I want to make it available from the www, but I am not quite there yet... The server is named smallserv.lan, the hostname is resolved by my router which is running dnsmasq on openwrt.
I can reach the server under the adress and everything works find. However, I would like to use SSL (I don't know what my roommates may be up to). I generated a key and a csr via openssl req -new -key server.key -out server.csr
. As a common name I entered "*.smallserv.lan".
I signed the csr using openssl x509 -req -days 365 -in server.csr -signkey server.key -out server.crt
.
I copied the certificate to my laptop, installed it and attempted to go to "https://smallserv.lan" using firefox.
I ended up getting a This Connection is Untrusted
warning claiming that
smallserv.lan uses an invalid security certificate.
The certificate is only valid for *.smallserv.lan
The *.smallserv.lan
is a link which points to https://www.smallserv.lan/
The www prefix is something that I find rather confusing. I thought that as a prefix this is reserved for names of servers which are acutually in the www.
I can't quite figure out how to get this right, should I choose www.smallserv.lan as a hostname of my local server or is there some way I can convice openssl to cerate the certificate for a local hostname?
Untrusted
anyway because it is by definition. You just agree to make an exception in this case and the actual connection will work fine. – goldilocks Nov 11 '14 at 19:26