News for hackers. Stuff that matters.

A comment on Why I stopped using StartSSL (Hint: it involves a Chinese company). Parent comment

Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by icebraining on Tuesday February 16, 2016 @07:44AM (#11109448)
What client did you use? acme-tiny has been flawless for me, though it's more manual than the main client.

https://github.com/diafygi/acme-tiny

[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by marcosdumay on Tuesday February 16, 2016 @08:47AM (#11109730)
Well, if you are some kind of openssl master, acme-tiny is flawless.

In practice, for most people, reserve a few hours for your first deployment. After you got a script that calls openssl right, it's fast to adapt for other domains, but the first time is hard.

[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by garblegarble on Tuesday February 16, 2016 @10:41AM (#11110538)
I use https://github.com/lukas2511/letsencrypt.sh and it handles all the openssl stuff for you, I've found it to be really nice and light-weight. You just give it a directory to put the ACME challenge files in and a list of your domains
[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by icebraining on Tuesday February 16, 2016 @09:30AM (#11109993)
Why do you have to be a master? Just copy-paste the commands given in the README of the repo, replacing the domain for your own.
[ Parent | on HN ]
Re:Why I stopped using StartSSL (Hint: it involves a Chinese... by marcosdumay on Tuesday February 16, 2016 @04:58PM (#11113436)
Well, at least on my computer, they were mostly broken.
[ Parent | on HN ]