<![CDATA[Cert issue for accessing local web pages]]>I'm running an Apache server on my LAN which is exported via port 443 thru the firewall and has a valid LetsEncrypt cert. DDNS is set up and if the pages are accessed from the WAN-side (i.e., shut off WIFI on my phone) then I can access them just fine. If accessed locally (via the LAN) I get this from the browser:

Websites prove their identity via certificates. Firefox does not trust this site because it uses a certificate that is not valid for xxxxxxxx.duckdns.org. The certificate is only valid for pfSense-610f2e56e00c5.
 
Error code: MOZILLA_PKIX_ERROR_SELF_SIGNED_CERT

Organization
Netgate pfSense Plus webConfigurator Self-Signed Certificate

How do I resolve this? All I've seen is somewhat related posts that require installing certs on every locally used web browser!

]]>https://forum.netgate.com/topic/167008/cert-issue-for-accessing-local-web-pagesRSS for NodeMon, 15 Jun 2026 04:57:26 GMTTue, 05 Oct 2021 21:42:13 GMT60<![CDATA[Reply to Cert issue for accessing local web pages on Tue, 05 Oct 2021 23:27:44 GMT]]>@cjnazz said in Cert issue for accessing local web pages:

I'm somewhat surprised that this resolves a certificate trust issue. Hum...

It resolves it because without that you are just hitting the pfSense webgui which is obviously not valid for the site you are trying to reach.

https://docs.netgate.com/pfsense/en/latest/recipes/port-forwards-from-local-networks.html

Steve

]]>https://forum.netgate.com/post/1004587https://forum.netgate.com/post/1004587Tue, 05 Oct 2021 23:27:44 GMT<![CDATA[Reply to Cert issue for accessing local web pages on Tue, 05 Oct 2021 22:26:46 GMT]]>Good to hear that it's working now

]]>https://forum.netgate.com/post/1004572https://forum.netgate.com/post/1004572Tue, 05 Oct 2021 22:26:46 GMT<![CDATA[Reply to Cert issue for accessing local web pages on Tue, 05 Oct 2021 22:24:29 GMT]]>@mcury Excellent. Added to Host Overrides. I'm somewhat surprised that this resolves a certificate trust issue. Hum...

Thank you.

]]>https://forum.netgate.com/post/1004571https://forum.netgate.com/post/1004571Tue, 05 Oct 2021 22:24:29 GMT<![CDATA[Reply to Cert issue for accessing local web pages on Tue, 05 Oct 2021 22:02:38 GMT]]>Split DNS..

Create an entry in DNS Resolver (in case you are using unbound) for the local address to be reachable by that name.

So, from the Internet, your WAN will be resolved.
From inside, the local address will be resolved.

]]>https://forum.netgate.com/post/1004569https://forum.netgate.com/post/1004569Tue, 05 Oct 2021 22:02:38 GMT