News for hackers. Stuff that matters.

A comment on Why I stopped using StartSSL (Hint: it involves a Chinese company). Parent comment

Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by Tepix on Tuesday February 16, 2016 @03:46AM (#11108611)
The official Let's Encrypt client is bloated and wants to fiddle with your HTTP server configuration. Bad idea.

Use something small like https://github.com/kuba/simp_le or https://github.com/diafygi/acme-tiny

[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by chmike on Tuesday February 16, 2016 @04:17AM (#11108710)
I use acme-tiny and confirm it is good. But there is still significant work to do to get a working certificate and the documentation is lacking significant details. I have my own recipe documentation that I should publish. Apart from this, this is the only script out there that did cut it for me.

Note that the update process needs to be automated because let's encrypt certificates last only 3 months as I have read.

[ Parent | on HN ]