https://my-it-blog.netlify.app/tags/ca/ Recent content in CA on My IT Journal Hugo en-us Wed, 08 Jul 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/private-certificate-authority/ Wed, 08 Jul 2026 00:00:00 +0000 https://my-it-blog.netlify.app/posts/private-certificate-authority/ <h1 id="https-with-nginx-using-a-private-certificate-authority">HTTPS with Nginx using a Private Certificate Authority</h1> <h2 id="objective">Objective</h2> <p>Secure an existing Nginx website using HTTPS and a certificate signed by a private Certificate Authority.</p> <hr> <h2 id="environment">Environment</h2> <ul> <li>Virtualization: VirtualBox</li> <li>OS: ( 1 DNS Server VM + 1 Web Server VM + 1 Client VM)</li> </ul> <hr> <h2 id="network-topology">Network Topology</h2> <p><img alt="dns-topology" loading="lazy" src="https://my-it-blog.netlify.app/posts/private-certificate-authority/dns-topology.png"></p> <hr> <h2 id="prerequisites">Prerequisites</h2> <p>This lab builds upon the Private DNS Infrastructure with BIND9. The following components are assumed to already be configured:</p> <ul> <li>BIND9 installed and running on the DNS server.</li> <li>The company.lab DNS zone created and configured.</li> <li>The zone file (/etc/bind/db.company.lab) already exists.</li> <li>The client is configured to use the internal DNS server (192.168.10.10) via Netplan.</li> <li>DNS resolution between the client and the DNS server has been verified.</li> </ul> <hr> <h2 id="phase-1---verify-dns-resolution">Phase 1 - Verify DNS Resolution</h2> <p>Before enabling HTTPS, verify that DNS resolves the web server correctly.</p>