Using Let’s Encrypt for internal servers(blog.heckel.io)
blog.heckel.io
Using Let’s Encrypt for internal servers
https://blog.heckel.io/2018/08/05/issuing-lets-encrypt-certificates-for-65000-internal-servers/
https://blog.heckel.io/2018/08/05/issuing-lets-encrypt-certificates-for-65000-internal-servers/
This setup creates an AWS key pair for each DNS name that can be used to prove to LetsEncrypt the ownership. So the machines in question, say dev workstations, can generate signed certs.
We used to use self-signed certs with long expiry times, but it is sounding like in the not too distant future there will be browser animosity towards long-lived certs.