owntracks with mutual tls

Managed to spin up owntracks with mtls on android-mosquitto connection also the browser-recorder webui connection I was unable to enable tls on the recorder-mosquitto connection. Just basic auth. But I think the setup is secure enough as recorder connects to mosquitto only in the local network

Please have a look

https://ippocratis.github.io/p/owntracks/

Thanks

12 points · 2 comments · view on lemmy.world

2 Comments

Illecors@lemmy.cafe · 2 pts · 3y (1 reply)

You've added localhost to subjectAltName - that's really bad, as absolutely everything running on your machine will match it.

ippokratis@lemmy.world · 1 pts · 3y

Thanks for pointing this out

Truth is only the domain you use to access mosquitto is needed in S.A.N.

localhost is a leftover from the countless trial and errors

Edited the post

also added source guides

Keep up