3 ms·

Malware isn't the problem - their automagic client screwing up my webserver is the problem. This is a justified concern given that the official client already d

by pdkl95 11y ago

Malware isn't the problem - their automagic client screwing up my webserver is the problem. This is a justified concern given that the official client already demonstrates bad behavior by causing side effects on --help (see my top level post).

mei0Iesh 11y ago
It is not a concern at all for me, because I can run that command from a user that does not have privileges to mess anything up. Those options make it not even attempt to read or write any web server configuration. All it does is create the certificate.
kuschku 11y ago
Even worse: It already has screwed up my webserver. Script crashed while trying to verify, left the apache config files in the modified state. Trying to get that back to work took another half hour of the server being down. I’m gonna use the simple website someone made to generate certificates from now on.
- baobrien 11y ago
  Take a look at acme-tiny as well. You can run acme-tiny in a cronjob to update your certs, since LE certs expire in 90 days.
  - kuschku 11y ago
    Doing it manually every 90 days isn’t that hard. I’d prefer if the default client would properly separate the parts it does, though.