4 ms·

Take a look at https://letsencrypt.org/ https://letsencrypt.org/ which will (mid-year) let you get a cert from the command, for free!, and automatically renew i

Take a look at https://letsencrypt.org/ https://letsencrypt.org/ which will (mid-year) let you get a cert from the command, for free!, and automatically renew it as well.

deleted 12y ago
[deleted]
- shawabawa3 12y ago
  > but i'm not sure if this would be a reasonable option for commercial use Why not?
  - muhpirat 12y ago
    Mhhhh I think he mean EV certs.
  - deleted 12y ago
    [deleted]
    - EwanToo 12y ago
      You mean like OpenSSL...?
      - deleted 12y ago
        [deleted]
      - leo_santagada 12y ago
        I see what you did there :)
      - muhpirat 12y ago
        EV -> extendetvalidition like PayPal or a bank
deleted 12y ago
[deleted]
- ownagefool 12y ago
  I believe it's supposed to be open source, thus you don't really need the daemon, you can probably make the service calls yourself. The daemon however, will ensure that your cert is replaced on auto-renewal, so for something fairly hands off, that be pretty cool.
  - schoen 12y ago
    Yep! Right now the "daemon" is planned to be another Python script run from /etc/cron.daily to examine your certs to see if any of them need to be renewed, and then try to renew them automatically. If you don't want the autorenewal, you can turn it off in what will probably be /etc/letsencrypt/renewal.conf, or with a command-line option when you obtain the cert, or use the standalone configurator (which won't enroll the cert in the renewal database), or write your own client for the ACME protocol that doesn't do autorenewal at all.
lordbusiness 12y ago
If ever there was proof that "someone out there has the same idea as you" is true, this is it; I've been conceiving an open to audit public, free CA for the past couple of weeks. It looks like my dream is coming true!
WaxProlix 12y ago
Is this live? It says it's coming 'mid 2015', and the standard (Ubuntu 12.04 LTS, I believe) repos don't seem to have any mention of it. Edit for anyone else curious about this: No, the letsencrypt CA isn't ready yet; there are test builds available for all of the software, but any certs you get will not be properly signed, and your users will get nasty browser warnings. Something to keep an eye on in the future, I guess.
- tokenizerrr 12y ago
  No, it is not mid 2015 yet.
  - WaxProlix 12y ago
    Hence the edit, man.
- michaelmior 12y ago
  Why do you consider Ubuntu 12.04 standard? 14.04 is the most current LTS release.

Take a look at https://letsencrypt.org/ https://letsencrypt.org/ which will (mid-year) let you get a cert from the command, for free!, and automatically renew it as well.

deleted 12y ago

[deleted]

shawabawa3 12y ago
> but i'm not sure if this would be a reasonable option for commercial use Why not?
- muhpirat 12y ago
  Mhhhh I think he mean EV certs.
- deleted 12y ago
  [deleted]
  - EwanToo 12y ago
    You mean like OpenSSL...?
    - deleted 12y ago
      [deleted]
    - leo_santagada 12y ago
      I see what you did there :)
    - muhpirat 12y ago
      EV -> extendetvalidition like PayPal or a bank

deleted 12y ago

[deleted]

ownagefool 12y ago
I believe it's supposed to be open source, thus you don't really need the daemon, you can probably make the service calls yourself. The daemon however, will ensure that your cert is replaced on auto-renewal, so for something fairly hands off, that be pretty cool.
- schoen 12y ago
  Yep! Right now the "daemon" is planned to be another Python script run from /etc/cron.daily to examine your certs to see if any of them need to be renewed, and then try to renew them automatically. If you don't want the autorenewal, you can turn it off in what will probably be /etc/letsencrypt/renewal.conf, or with a command-line option when you obtain the cert, or use the standalone configurator (which won't enroll the cert in the renewal database), or write your own client for the ACME protocol that doesn't do autorenewal at all.

lordbusiness 12y ago

If ever there was proof that "someone out there has the same idea as you" is true, this is it; I've been conceiving an open to audit public, free CA for the past couple of weeks. It looks like my dream is coming true!

WaxProlix 12y ago

Is this live? It says it's coming 'mid 2015', and the standard (Ubuntu 12.04 LTS, I believe) repos don't seem to have any mention of it. Edit for anyone else curious about this: No, the letsencrypt CA isn't ready yet; there are test builds available for all of the software, but any certs you get will not be properly signed, and your users will get nasty browser warnings. Something to keep an eye on in the future, I guess.

tokenizerrr 12y ago
No, it is not mid 2015 yet.
- WaxProlix 12y ago
  Hence the edit, man.
michaelmior 12y ago
Why do you consider Ubuntu 12.04 standard? 14.04 is the most current LTS release.