How to install LetsEncrypt SSL on public IP Address?
I have tried it on domains and it is working fine. But can't be able to install it on IP Address.
Asked
Active
Viewed 4.1k times
43
-
SSL certificates are inherently tied to a domain name, not an IP address. You could, in theory, serve it on all vhosts on a given IP, but that probably only makes sense if you have a wildcard certificate. – Vatine Mar 30 '16 at 10:49
-
2@Vatine, in principle, [it is possible to obtain a certificate for an IP address](https://stackoverflow.com/a/2043645/). – Dec 31 '17 at 21:06
2 Answers
54
Let's Encrypt issues domain-validated certificates. The certificates must be attached to at least a domain name.
Moreover, Let's Encrypt policy is to not issue SSL certificates for IP addresses, therefore you won't be able to use the certificate to a server that it's reachable only thought its IP address.
Technically, you can install it. But when connecting to the IP address, the clients will display a certificate name mismatch error.
Simone Carletti
- 173,507
- 49
- 363
- 364
-5
Yes, SSL on IP can be implemented. During the SSL ordering process, you need to put IP instead of domain name. But as LetsEncrypt is new to market, not sure about them.
Rrana425
- 9
- 3
-
Yes, we can easy install any paid SSL to IP Address. But LetsEncrypt are not offering this service right now. – Rahul Kohli Mar 30 '16 at 11:03
-
1The error if you try that is : `The Let's Encrypt certificate authority will not issue certificates for a bare IP address.` – fp007 Oct 18 '21 at 09:09
-
3