[GH-ISSUE #210] Can I use it on the LAN network? #137

New issue

Closed

opened 2026-02-25 22:32:42 +03:00 by kerem · 3 comments

kerem commented

2026-02-25 22:32:42 +03:00

Owner

Originally created by @chaihongjun on GitHub (Oct 23, 2019).
Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/210

There is a server (IP:192.168.0.222 ) in the LAN, I have configured it with the LAN DNS service (dnsmasq), and this server is also doing Web services. Now I want to install mkcert on it, as a CA certificate organization.Will it work?

Originally created by @chaihongjun on GitHub (Oct 23, 2019). Original GitHub issue: https://github.com/FiloSottile/mkcert/issues/210 There is a server (IP:192.168.0.222 ) in the LAN, I have configured it with the LAN DNS service (dnsmasq), and this server is also doing Web services. Now I want to install mkcert on it, as a CA certificate organization.Will it work?

kerem

2026-02-25 22:32:42 +03:00

closed this issue
added the
question
label

kerem commented

2026-02-25 22:32:42 +03:00

Author

Owner

@rfay commented on GitHub (Oct 23, 2019):

A cert verifies the domain name not any IP address. The verification happens in your browser or other client though.

However, you seem to be talking about generating certs on a server and trying to trust them on clients. That will require you to have the clients trust the CA. See https://github.com/FiloSottile/mkcert/blob/master/README.md#installing-the-ca-on-other-systems for a general approach.

What we do is essentially:

Install CA on server and clients
Run mkcert -install on server
Copy that CA to clients per the readme and mkcert -install it on the clients
Now certs generated on the server are trusted by the clients.

@rfay commented on GitHub (Oct 23, 2019): A cert verifies the *domain name* not any IP address. The verification happens in your browser or other client though. However, you seem to be talking about generating certs on a server and trying to trust them on clients. That will require you to have the clients trust the CA. See https://github.com/FiloSottile/mkcert/blob/master/README.md#installing-the-ca-on-other-systems for a general approach. What we do is essentially: * Install CA on server and clients * Run mkcert -install on server * Copy that CA to clients per the readme and `mkcert -install` it on the clients * Now certs generated on the server are trusted by the clients.

kerem commented

2026-02-25 22:32:42 +03:00

Author

Owner

@i300220 commented on GitHub (Jan 17, 2021):

What if the client is Windows XP? I know it's obsolete but I still use it on one dedicated computer. Your amd64 mkcert won't work there. I tried to put the cert in %Appdata%/mkcert but don't know whether or not it's enough.

Second question. What if I have 2 servers on my LAN and I want to generate certs for both (could be identical I don't care) and use the cert(s) on the LAN clients.

Your method works well for 1 server actually. I'm not keen to experiment with 2 servers. Hence my question.

Best regards, and thanks for that awesome tool. It's long time need. In fact who os the best to certify a certificate if not oneself. Certainly not greedy companies that keep your key for a fee on top of that. It.s a LAN.

Best!

@i300220 commented on GitHub (Jan 17, 2021): What if the client is Windows XP? I know it's obsolete but I still use it on one dedicated computer. Your amd64 mkcert won't work there. I tried to put the cert in %Appdata%/mkcert but don't know whether or not it's enough. Second question. What if I have 2 servers on my LAN and I want to generate certs for both (could be identical I don't care) and use the cert(s) on the LAN clients. Your method works well for 1 server actually. I'm not keen to experiment with 2 servers. Hence my question. Best regards, and thanks for that awesome tool. It's long time need. In fact who os the best to certify a certificate if not oneself. Certainly not greedy companies that keep your key for a fee on top of that. It.s a LAN. Best!

kerem commented

2026-02-25 22:32:42 +03:00

Author

Owner

@maxsyst commented on GitHub (Dec 11, 2025):

hello world, anyone can use like "https://192.168.101.2" get the green tag visit servie?

@maxsyst commented on GitHub (Dec 11, 2025): hello world, anyone can use like "https://192.168.101.2" get the green tag visit servie?

kerem referenced this issue

2026-02-25 22:33:23 +03:00

[PR #137] [MERGED] Swap exec.Command("hostname") for os.Hostname() #399