Jira on https internal lan

[Netinium]

Hello,

We will like that our Jira is working on https 8443 but only for internal lan network.

like "https://jira.domain.local" but Letsencrypt is only for public websites?! (.com etc)

How can I make a certificate that work on internal lan and not gifs an security error?

thanx

[Andy Heinzer · Accepted solution]

Taking a page from Let's Encrypt's own community, check out this link

https://community.letsencrypt.org/t/ssl-certificate-for-a-internal-only-domain-thats-not-on-the-internet/27062/6

It's another discussion about this very topic.  In it the user ahaw021, explains a couple options for how you could make this work on an internal only address. 

You are right. There are two ways of going about this.

A) Create your own internal CA and add it’s intermediate to all the machines in your corporate network (this is quite common for example internal intranets). This is quite common in Windows Server environments.
B) CAs like GloablSign will provide an enterprise PKI capability (i.e. the ability to sign it’s own certificates which are then linked up to GlobalSign).
C) You can use Boulder as your CA (this is what LetsEncrypt uses) and the certificate from B to get the best of both worlds. I.e. an Internal CA which adheres to ACME protocol. Microsoft CA relies on Microsoft Services for certificates etc.

https://www.globalsign.com/en/certificate-authority-root-signing/