Comment on Centralized SSL certificate management?
moodoovoodoo@lemmy.world 1 week agoDepends on your config, I’m just doing DNS (proxied). So you hit my nginx and that’s where the cert is provided.
Comment on Centralized SSL certificate management?
moodoovoodoo@lemmy.world 1 week agoDepends on your config, I’m just doing DNS (proxied). So you hit my nginx and that’s where the cert is provided.
KairuByte@lemmy.dbzer0.com 1 week ago
Have you actually confirmed that is the case? My understanding is that cloudflare pretty much always re-signs with their own SSL cert. and I’m fairly certain that would be absolutely required when using their DNS proxies.
moodoovoodoo@lemmy.world 5 days ago
I have confirmed it - it’s how I run all my services
KairuByte@lemmy.dbzer0.com 5 days ago
Yes, it’s also how I run all my services. I checked just this moment, and locally my certs verified by field is
Let’s Encrypt, while remotely that field isGoogle Trust ServicesI have never personally provisioned a cert from Google. I have only ever utilized Let’s Encrypt. That leaves just one involved party that could have requested, received and presented this cert: Cloudflare.