Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 2 replies
  • Subscribers 3 subscribers
  • Views 4935 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Let'sEncrypt Allow Certificate Check Through Firewall

fake user

Good evening,

I recently deployed an internal Matrix-Synapse home server to act as a chat server for my team. I opened the firewall to perform a Let'sEncrypt certificate install and subsequently closed my firewall again blocking all traffic.

 

At present, users cannot connect as the certificate cannot be verified. I know that Let'sEncrypt do not publish their IP, but do they offer another means? Perhaps a simple DNS? I would like to know if there is a firewall rule that I could implement to allow checking of the certificate only?

 

Any help would be greatly appreciated.



This thread was automatically locked due to age.
  • 0

    I believe for a LE certificate to be issued, your server must be reachable on ports 80 and 443.

    Managing several Sophos firewalls both at work and at some home locations, dedicated to continuously improve IT-security and feeling well helping others with their IT-security challenges.

  • 0 in reply to apijnappels

    Thanks for your reply.

     

    I already have the certificate issued I just need internal users (that have no internet) to be able to connect without a certificate error. I need to know which ip, dns, ports to open to allow the the certificate check to occur.

Unfiltered HTML