Let's Encrypt has issued its first million certificates

Re:Let's Encrypt has issued its first million certificates by XorNot on Tuesday March 08, 2016 @09:05AM (#11245250)

The default LE client was kind of a pain to work with. The docker container was better but where it really helped was the Lego golang implementation. That one 'just works' and was super easy to setup behind nginx to run automatically. It also writes a nicer config dir.

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by veeti on Tuesday March 08, 2016 @10:21AM (#11245711)

In case anybody didn't know, there are already over 10 alternative clients. There should be something for everyone:

https://community.letsencrypt.org/t/list-of-client-implement...

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by jamesblonde on Tuesday March 08, 2016 @02:53PM (#11248009)

Still waiting on a Glassfish or Wildfly client. We managed to wrangle the standalone client to generate a certficate that can be used by glassfish, but it's not pretty. See the code here: https://github.com/hopshadoop/hopsworks-chef/blob/master/rec...

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by metachris on Tuesday March 08, 2016 @10:18AM (#11245694)

acme-tiny is another good and simple client, which I personally prefer.

I've recently compared 10 different Let's Encrypt / ACME clients: https://www.metachris.com/2015/12/comparison-of-10-acme-lets...

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by nuxi7 on Tuesday March 08, 2016 @12:16PM (#11246667)

I forked acme-tiny the other day and replaced http-01 with dns-01. The dns-01 implementation is pretty simple and crude for now, I'll probably add dynamic dns update support at some point. All it does is print the records out and wait for you to add them manually.

https://github.com/nuxi/acme-tiny

For now I've just done enough to get a cert for a mail server.

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by labster on Tuesday March 08, 2016 @08:23PM (#11250196)

In your review, whenever I click a "show output" link, it navigates to another page containing only "[object Object]". Can you change the href to be an onclick attribute or something like that?

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by metachris on Wednesday March 09, 2016 @10:17AM (#11253404)

Thanks for the suggestion, I'll update the post tonight. Didn't notice / cannot reproduce - it seems to work for me in all browsers.

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by vmuhonen on Tuesday March 08, 2016 @10:05AM (#11245609)

I found the default client to work as expected. It doesn't automatically modify nginx config, but I really don't want it to. It's simple to point the config to a correct location and then just use the webroot plugin. (Granted that needed the change to allow access to hidden directory via HTTP, but that wasn't rocket science either)

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by nzoschke on Tuesday March 08, 2016 @09:32AM (#11245402)

Thanks for sharing your experience here, I'll go straight to lego when I go to set it up. It's hard to beat the simplicity of a Go binary for system tools like this.

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by awqrre on Tuesday March 08, 2016 @10:59AM (#11246020)

How is a binary simpler then a script?

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by mholt on Tuesday March 08, 2016 @11:05AM (#11246067)

True Go binaries like lego[1] are statically compiled (zero external dependencies). No need to fuss about versions of installed dependencies, updates, package management, etc. You just run the binary and it just works.

[1]: https://github.com/xenolf/lego

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by awqrre on Tuesday March 08, 2016 @07:22PM (#11249915)

Can't you package a script with all required dependencies, including the interpreter?

[ Parent | on HN ]

Re:Let's Encrypt has issued its first million certificates by ris on Tuesday March 08, 2016 @02:45PM (#11247939)

acme-tiny was the winner for me.

[ Parent | on HN ]