News for hackers. Stuff that matters.

A comment on On the fly SSL registration and renewal inside Nginx with Let's Encrypt. Parent comment

Re:On the fly SSL registration and renewal inside Nginx with... by okket on Wednesday July 20, 2016 @11:57AM (#12130025)
If you are going this scale, there is another way: Use your own DNS server and try the DNS-01 challenge. My setup works with [0]letsencrypt.sh, [1]pdns_api.sh, [2]PowerDNS4 (MySQL backend w/ replication) and a little script that distributes the certs and restarts services. The nice thing is, this works for anything you can put in DNS, you do not need not to respond to a HTTP request for a name (think mail server).

[0] https://github.com/lukas2511/letsencrypt.sh [1] https://github.com/silkeh/pdns_api.sh [2] https://github.com/PowerDNS/pdns

[ Parent | on HN ]

There are no comments on this comment yet.