4 ms·
Maybe they should have single day "test certs" for which you can issue an unlimited number on a given day for a given domain. Not even completely sure this woul
by n0us 11y ago
Maybe they should have single day "test certs" for which you can issue an unlimited number on a given day for a given domain. Not even completely sure this would work but it might be convenient to have even with the limit increase.
- pfg 11y agoGiven that the resource being limited here is signing operations performed by their HSM, this wouldn't really help much. (OCSP responses wouldn't have to be signed for quite as long, but still.) There's a staging server issuing untrusted certificates with significantly higher rate limits for this purpose. With the reference client, it's a matter of using the --staging flag.
- duaneb 11y agoI'd prefer they open sourced and allowed you to run the service (self-signed) locally.
- pfg 11y agoThey do! boulder[1], the server software behind Let's Encrypt, is open source. [1]: https://github.com/letsencrypt/boulder https://github.com/letsencrypt/boulder
- duaneb 11y agoI stand corrected! Seems like the best way to do your testing, then—nobody else needs to know how many times you sign your own certs.