After mulling over how to use SSL within a LAN in a way that I felt really satisfied with, it took me well over 20 years! Did that ever take a long time.
#SelfHosting #TLS #SSL #web #infosec
@sbb So what was the solution?
@ceresbzns You'd probably hate it, as it involves using short-lived nfs mounts through #wireguard tunnels. The hosts in the LAN copy the certs they need in this way. Systemd timers automate this "pulling". I only had to write 10 lines of bash code, in the way of actual programming.
@sbb If it works for you, that's great. I'm not sure I understand why, tho. If you're already using wireguard to encrypt VLAN network traffic, what value does the SSL add?