News for hackers. Stuff that matters.

A comment on AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS. Parent comment

Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by pfg on Thursday January 21, 2016 @02:12PM (#10947510)
I'm not familiar enough with docker to comment on what the best solution would be. That being said, instinctively I would say that a certificate is something that should be provided to docker instances as part of the configuration and not acquired whenever you launch a new instance (you would run into rate limits quite fast).

With DNS-based validation you have to create a TXT record on your domain with a random token. If you can automate creation of TXT records from your setup, that would be an option to solve the challenge. The rate limit issue still applies.

[ Parent | on HN ]
Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by sandGorgon on Thursday January 21, 2016 @03:13PM (#10947966)
This is the same problem of circular dependency then. Does the random token stay alive for longer than 90 days? Then this might still work.
[ Parent | on HN ]
Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by pfg on Thursday January 21, 2016 @03:42PM (#10948152)
IIRC authorizations (solved challenges) expire after 10 months, so you could get up to 13 months of certificate coverage out of one solved challenge. The official client doesn't support this yet, it will request a new challenge token on every run.
[ Parent | on HN ]
Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by serge2k on Thursday January 21, 2016 @03:51PM (#10948229)
How is that a circular dependency?
[ Parent | on HN ]