I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting at most.
SSTP requires a server certificate. I can generate a server certificate with CACERT, but it is linked to a specific domain. I do own a domain, but it is not hosted at the address where the VPN server will be running. The VPN server has a dynamic DNS address.
If I install a server certificate for my domain, and bind the certificate to the VPN, will it be possible for clients to connect? I don't mind if I have to approve a one-time exception at the clients.
If there are other issues, how can I work around them?
Thanks!
It'll work as long as the CN on the certificate matches the IP name the clients connected to - there's lots of ways of doing that, obvious ones include using a dynamic DNS nameserver or updating the hosts file on the client.