HTTPS

[Arthur777]

Hello, I'm trying to set up HTTPS on my Proxmox server. Currently, I've executed these commands:


openssl genrsa -out pvenode1.key 2048
openssl req -new -key pvenode1.key -out pvenode1.csr
openssl x509 -req -days 365 -in pvenode1.csr -signkey pvenode1.key -out pvenode1.crt

Then, I uploaded the certificate and key into PVE1. It worked; now I have the warning popup, but I'm still on HTTP. I think it's because the certificate is self-signed and not issued by a trusted certificate authority. Does anyone know how I can make my browser trust my key or another method to switch to HTTPS?

Thanks in advance.

 

[Dunuin]

It worked; now I have the warning popup, but I'm still on HTTP. I think it's because the certificate is self-signed and not issued by a trusted certificate authority

PVE comes with HTTP disabled. HTTPS with a self-signed certificate is the default. And yes, you either need to pay for a proper domain and then use something like letsencrypt as your certificate authority if you want to get rid of that warning or you would need to install the CA of the self-signed certificate to all clients you want to access PVE with.

 

[louie1961]

Why not get a let's encrypt certificate? Its very easy to do so long as you have a domain name. The acme function in Proxmox works quite well. Domain names are pretty inexpensive.

 

[Arthur777]

Why not get a let's encrypt certificate? Its very easy to do so long as you have a domain name. The acme function in Proxmox works quite well. Domain names are pretty inexpensive.

I tried using ACME, but I can't use the HTTP method because my server isn't publicly accessible. I have to use the DNS method, but I don't really understand how to do it because I don't know my DNS API.

 

[Arthur777]

you would need to install the CA of the self-signed certificate to all clients you want to access PVE with.

How could I go about doing that?

 

[louie1961]

I tried using ACME, but I can't use the HTTP method because my server isn't publicly accessible. I have to use the DNS method, but I don't really understand how to do it because I don't know my DNS API.

who are you using for DNS? I used this Cloudflare tutorial, as all my domains are in Cloudflare

https://www.youtube.com/watch?v=2_PhwHOxytM&t=1s

 

[Arthur777]

That's the problem. I'm using the DNS server of the company where I'm doing my internship, and they can't provide me with any information about it other than its IP address. I guess I can't follow the tutorial if it's not using Cloudflare, right? That's why I was looking to do something self-signed with my own certificate authority, etc.