5 ms·

Pricing page goes 404 :( http://aws.amazon.com/certificate-manager/pricing/ http://aws.amazon.com/certificate-manager/pricing/

• falcolas 11y ago
  Anything too much higher than "free" is probably going to be too high once Let's Encrypt implements DNS based validation. Of course, it does look like they support wildcard certs, so it probably won't be cheap. EDIT: Removed EV reference, these are DV only.
  • yuvipanda 11y ago
    Let's encrypt turned on DNS validation a few days ago https://twitter.com/letsencrypt/status/689919523164721152 https://twitter.com/letsencrypt/status/689919523164721152
    • falcolas 11y ago
      Hadn't seen that, thanks for the link!
  • pfg 11y ago
    DNS validation landed in production yesterday[1]! \o/ The official client doesn't support it yet though; you'll have to use alternative clients. [1]: https://twitter.com/letsencrypt/status/689919523164721152 https://twitter.com/letsencrypt/status/689919523164721152
    • sandGorgon 11y ago
      how does this work ? one of the big challenges with letsencrypt was that I'm unable to bake it in my Docker images. I had a circular dependency - where my nginx wont start without my certificate and letsencrypt needs nginx to be running to serve the temp file that it creates. does this solve that ? Am I now able to bake letsencrypt in my docker images ?
      • pfg 11y ago
        I'm not familiar enough with docker to comment on what the best solution would be. That being said, instinctively I would say that a certificate is something that should be provided to docker instances as part of the configuration and not acquired whenever you launch a new instance (you would run into rate limits quite fast). With DNS-based validation you have to create a TXT record on your domain with a random token. If you can automate creation of TXT records from your setup, that would be an option to solve the challenge. The rate limit issue still applies.
        • sandGorgon 11y ago
          This is the same problem of circular dependency then. Does the random token stay alive for longer than 90 days? Then this might still work.
          • pfg 11y ago
            IIRC authorizations (solved challenges) expire after 10 months, so you could get up to 13 months of certificate coverage out of one solved challenge. The official client doesn't support this yet, it will request a new challenge token on every run.
          • serge2k 11y ago
            How is that a circular dependency?
      • joshstrange 11y ago
        You might want to take a look at this, not sure if it will work for you though: https://github.com/JrCs/docker-letsencrypt-nginx-proxy-companion https://github.com/JrCs/docker-letsencrypt-nginx-proxy-compa...
      • finnn 11y ago
        I have an ansible role that deploys letsencrypt certificates. It's not perfect, but currently the flow is: check if nginx is running. if it's running, use the webroot authenticator. if it's not, use the standalone authenticator. This creates issues come renewal time, but a few tweaks to the renewal config (/etc/letsencrypt/renewal/your.domain.conf) fixes that
  • kingkilr 11y ago
    It launched yesterday :-) https://alexgaynor.net/2016/jan/20/announcing-letsencrypt-aws/ https://alexgaynor.net/2016/jan/20/announcing-letsencrypt-aw... is some tooling I wrote for use on AWS.
    • ubergeek42 11y ago
      Very cool, I was working on basically the same thing[1]. What do you think will happen to your project now that this exists from Amazon? [1] https://github.com/ubergeek42/lambda-letsencrypt/ https://github.com/ubergeek42/lambda-letsencrypt/
  • arcdigital 11y ago
    The DV certs are free (including wildcard certs)!
    • nikolay 11y ago
      And that's the benefit compared to Let's Encrypt, which doesn't have wildcard certs (yet).
• arcdigital 11y ago
  It's free :) http://aws.amazon.com/certificate-manager/pricing/ http://aws.amazon.com/certificate-manager/pricing/
• nitinics 11y ago
  SSL/TLS certificates provisioned through AWS Certificate Manager are free. You pay only for the AWS resources you create to run your application.
• _alex_ 11y ago
  It's no longer 404'ing. Certs are free