4 ms·
Another good method is to use https://github.com/diafygi/acme-tiny https://github.com/diafygi/acme-tiny and the ciphers from https://cipherli.st https://cipherl
by JelteF 10y ago
Another good method is to use https://github.com/diafygi/acme-tiny https://github.com/diafygi/acme-tiny and the ciphers from https://cipherli.st https://cipherli.st
- JoshTriplett 10y agoI used acme-tiny to secure several domains on my server, including automated renewal via cron, running as an unprivileged user that only has access to the CSR, the ACME auth key, and the directory /.well-known/acme maps to, but not the server private key. Took about an hour to secure three domains, most of which was convincing OpenSSL to produce the right three CSRs with SubjectAltName set (to cover the "www." variants so I can securely redirect them).