Dynamic DNS with Cert Provider?

leaskovski · 14 Feb 2017 at 09:29

Hi Guys,

I am currently using https://www.changeip.com/ to provide a free dynamic DNS service for my PI at home so I can VPN in to my home network.

I am now using the PI to also serve up a python webapp so that I can use a specific Alexa Skill so I can access Google Music on the Echo Dot that I have. In order to do this I ave to open up the webapp under HTTPS. Now I have tested it all using ngrok to basically server my HTTPS, and now I am porting it to not have to use ngrok, and instead setup flask in HTTPS by passing in a key file and a self signed cert. This is all ok, but it looks like for some reason, the media stream doesn't like the fact that its a self signed so I want to have a try with a proper cert.

So, I am looking for a provider that offers dynamic DNS but also a CA'd certificate. I.E. I generate a Cert Request, submit, and get a cer back which means my HTTPS site isn't moaned about being insecure due to not being signed by a CA.

If I have to register my own domain, so be it, but I prefereably want to keep this to under the £10 mark per year.

Any recommendations?

Cheers

RoyMi6 · 14 Feb 2017 at 12:19

If you buy domainname.com and a wildcard SSL cert then simply point your DNS record for house.domainname.com to your DDNS name then this should work...

Worth looking at https://letsencrypt.org/ to get a free signed SSL cert to test things out.

leaskovski · 14 Feb 2017 at 12:58

That free signed cert looks interesting, as I have control over the server dishing up the website, just need to figure out how to hook it in to my PI and the site that is running via a Flask app in python.

Cheers

joeyjojo · 14 Feb 2017 at 13:08

Probably no need for a third party, it's trivial to make your own (self-signed) certificates.

RoyMi6 · 14 Feb 2017 at 13:34

joeyjojo said:
Probably no need for a third party, it's trivial to make your own (self-signed) certificates.

"the media stream doesn't like the fact that its a self signed so I want to have a try with a proper cert"

shine · 14 Feb 2017 at 13:41

You can get free cert from Let's Encrypt.

Caged · 14 Feb 2017 at 22:01

The SSL cert isn't linked to your IP address in any way, so use whatever you want for dynamic DNS, and Let's Encrypt for the cert.

ScoTTyBEEE · 17 Feb 2017 at 00:16

I use cloud flare which give a ca signed cert for their front end and lets you use a self signed cert from then to your server which you never see. Free too.

Sp00n · 17 Feb 2017 at 09:01

shine said:
You can get free cert from Let's Encrypt.

^