News for hackers. Stuff that matters.

A comment on AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS. Parent comment

Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by DanielDent on Thursday January 21, 2016 @04:52PM (#10948691)
I have an nginx Letsencrypt integration example which might be helpful to you:

https://github.com/DanielDent/docker-nginx-ssl-proxy

My solution is to simply include a self-signed dummy keypair that gets replaced by the letsencrypt keys when they get issued.

An alternative approach would be to remove the SSL listener entirely until the certificate is issued.

[ Parent | on HN ]
Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by sandGorgon on Thursday January 21, 2016 @10:37PM (#10950594)
This is awesome. Thanks for packaging it!!

Does the DNS based validation make this better in any way?

[ Parent | on HN ]
Re:AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS by DanielDent on Friday January 22, 2016 @04:26AM (#10951722)
You are welcome :). Glad you like it.

I assume you mean Let's Encrypt's newly announced DNS validation approach to issuance? I think that would only add unnecessary complexity here.

There are other setups where that will be nice to have, but I don't think this is one of them.

[ Parent | on HN ]