Certificate for OSX server

[aicul]

My certificate for OSX server has expired.

This server is for family stuff so quite frankly I don't see the use for an expensive certificate.

I was wondering about the self-signed certificates and whether this was an acceptable option given the "family" orientation of the server.

Is there a impending "don't do this" reason I should be aware of ?

 

[talmy]

I've run a home OSX server for over 4 years now with just a self-signed certificate and have had no issues. You just have to manually trust it whenever a dialog pops up. Yes it's a nuisance, but it's also free, and you only have to do it once a year.

 

[jtara]

If you really want an NSA backdoor, and like spending money on things that have no intrinsic value, get a commercial certificate.

If you're OK without the NSA backdoor, and want to save some money, use a self-signed certificate.

You just have to manually trust it whenever a dialog pops up

A better way is to create a Certificate Authority, and then install a root certificate on the machines that will access it.

 

[aicul]

thanks

A better way is to create a Certificate Authority, and then install a root certificate on the machines that will access it.

sounds good, but maybe beyond my (brain) grasp. Do you have a good link for some reading ?

 

[satcomer]

You should try to watch the series by Todd Olthoff on 10.9 OS X Server.