4 ms·

Let's Encrypt is a bit of a joke though. You have to renew every 3 months. Anyone who has used these certs knows what a huge pain in the arse it is to do even o

by sqldba 11y ago

Let's Encrypt is a bit of a joke though. You have to renew every 3 months. Anyone who has used these certs knows what a huge pain in the arse it is to do even once a year. "Oh but we'll work out some way to semi-automate it". Ok, where is it for those of us on cheap cpanel providers who barely know what we're doing? I though this service was for us?

pilif 11y ago
> we'll work out some way to semi-automate it no. It will be automated completely. You set stuff up once and the certificate will be kept up to date. >Ok, where is it for those of us on cheap cpanel providers who barely know what we're doing let's encrypt support will be added into cpanel or even into the web servers powering cpanel. All you'll have to do is check a checkbox or set a configuration file entry in the style of `enable_letsencrypt=yes` and you're done. You won't have to care when the certificate expires. At that point 3 months starts to become interesting because expiration provides a nice hard cutoff date for revocation which works independently of OCSP and CRL availablility.
jms703 11y ago
There's no joke about the benefits of automation here. I recommend you take the time to figure out how to do it, being a provider.
vbtechguy 11y ago
automation will eventually be the way just that Letsencrypt client and 3rd party clients need time to evolve and develop to the stage that is acceptable for most folks there's a list of clients being developed on their forums some already have auto renewal automation done see https://community.letsencrypt.org/t/list-of-client-implementations/2103/5 https://community.letsencrypt.org/t/list-of-client-implement... for plesk https://community.letsencrypt.org/t/plesk-and-letsencrypt/4255/3 https://community.letsencrypt.org/t/plesk-and-letsencrypt/42... for Centmin Mod LEMP stack http://centminmod.com/letsencrypt-freessl.html http://centminmod.com/letsencrypt-freessl.html cpanel feature request at https://features.cpanel.net/topic/provide-support-for-lets-encrypt-automated-certificate-management-ssl https://features.cpanel.net/topic/provide-support-for-lets-e... where cpanel folks are interested too

by sqldba 11y ago

pilif 11y ago

> we'll work out some way to semi-automate it no. It will be automated completely. You set stuff up once and the certificate will be kept up to date. >Ok, where is it for those of us on cheap cpanel providers who barely know what we're doing let's encrypt support will be added into cpanel or even into the web servers powering cpanel. All you'll have to do is check a checkbox or set a configuration file entry in the style of `enable_letsencrypt=yes` and you're done. You won't have to care when the certificate expires. At that point 3 months starts to become interesting because expiration provides a nice hard cutoff date for revocation which works independently of OCSP and CRL availablility.

jms703 11y ago

There's no joke about the benefits of automation here. I recommend you take the time to figure out how to do it, being a provider.

vbtechguy 11y ago

automation will eventually be the way just that Letsencrypt client and 3rd party clients need time to evolve and develop to the stage that is acceptable for most folks there's a list of clients being developed on their forums some already have auto renewal automation done see https://community.letsencrypt.org/t/list-of-client-implementations/2103/5 https://community.letsencrypt.org/t/list-of-client-implement... for plesk https://community.letsencrypt.org/t/plesk-and-letsencrypt/4255/3 https://community.letsencrypt.org/t/plesk-and-letsencrypt/42... for Centmin Mod LEMP stack http://centminmod.com/letsencrypt-freessl.html http://centminmod.com/letsencrypt-freessl.html cpanel feature request at https://features.cpanel.net/topic/provide-support-for-lets-encrypt-automated-certificate-management-ssl https://features.cpanel.net/topic/provide-support-for-lets-e... where cpanel folks are interested too