4 ms·
Letsencrypt is easy, if you are running generic Linux distribution and can easily install whatever you want. But you might run a device that already comes with
by vetinari 5y ago
Letsencrypt is easy, if you are running generic Linux distribution and can easily install whatever you want.
But you might run a device that already comes with software, and letsencrypt support is either limited (example: Synology; their implementation allows only http-01 challenge so if you need dns-01, tough luck. Even wildcards are a new feature) or non-existent (example: Ubiquiti, and their cloud keys (administration UI, guest portal) or routers (Radius/WPA Enterprise needs TLS cert too)).
- throw0101a 5y agodns-01 is possible on Synology, but you need to SSH in: * https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS-Guide https://github.com/acmesh-official/acme.sh/wiki/Synology-NAS... * https://lippertmarkus.com/2020/03/14/synology-le-dns-auto-renew/ https://lippertmarkus.com/2020/03/14/synology-le-dns-auto-re... * http://www.thedreaming.org/2020/11/18/synology-lets-encrypt/ http://www.thedreaming.org/2020/11/18/synology-lets-encrypt/ It's possible as long as your ACME client has hook scripts, and your DNS provider has an API: * https://github.com/AnalogJ/lexicon https://github.com/AnalogJ/lexicon
- andrewaylett 5y agoIt's unofficial, but https://github.com/kchristensen/udm-le https://github.com/kchristensen/udm-le lets you provision LetsEncrypt certificates for Ubiquiti kit.