6 ms·
I was in the same boat, I didn't like having to run python on my server just to renew a SSL certificate. Still, a few months ago I decided to give it a try and
by simias 9y ago
I was in the same boat, I didn't like having to run python on my server just to renew a SSL certificate. Still, a few months ago I decided to give it a try and I don't regret it. The certbot script is packaged in FreeBSD, it wasn't painful at all to setup and a crontask later it was over. Definitely beats the crappy free "startssl" certificates that I used previously.
- corobo 9y ago> startssl I must have at least 4 accounts there due to them using client certificate login. Great proof of concept why certificate based website logins never took off.
- catdog 9y agoThere also are a lot of alternative [1] implementations which are less bloated, some are really small with only some hundred lines of code and few dependencies. [1] https://letsencrypt.org/docs/client-options/ https://letsencrypt.org/docs/client-options/
- weavie 9y agoacme.sh runs in pure shell, no need to install Python. It's my goto client and it just works.. everywhere. https://github.com/Neilpang/acme.sh https://github.com/Neilpang/acme.sh
- theandrewbailey 9y agoSeconded. I love that it supports custom port numbers, so I can use my not privileged web server port.
- dom0 9y agoacme.sh + static verification is indeed a very nice zero maintenance solution.
- icebraining 9y agoIf you use the DNS verification, you could run the client on your local machine and then upload the cert. I started writing a small utility to do just that (and then upload the cert to CPanel using their API). It works, though I'm lazy to make it reliable enough for release.