On the fly SSL registration and renewal inside Nginx with Let's Encrypt

Re:On the fly SSL registration and renewal inside Nginx with... by nickblah on Wednesday July 20, 2016 @12:40PM (#12130407)

Author here. I hadn't really considered it, but it should be possible. Since we're handling this with nginx and Lua, it made it pretty trivial to handle the simple HTTP challenge (since we can easily intercept the /.well-known/acme-challenge request), so that's why we went with that approach, but other approaches should be possible.

[ Parent | on HN ]

Re:On the fly SSL registration and renewal inside Nginx with... by finnn on Wednesday July 20, 2016 @12:46PM (#12130471)

I guess I figured DVSNI should be even easier since you're already evaluating the domains of incoming TLS connections and picking which cert to respond with from there.

[ Parent | on HN ]

Re:On the fly SSL registration and renewal inside Nginx with... by nickblah on Wednesday July 20, 2016 @12:54PM (#12130525)

I haven't actually looked into DVSNI in too much detail before, so that could definitely be the case. I'll have to investigate a bit more (or any pull requests are always welcome). Thank you for the tip!

[ Parent | on HN ]

Re:On the fly SSL registration and renewal inside Nginx with... by finnn on Wednesday July 20, 2016 @01:02PM (#12130601)

No problem, thanks for building this!

[ Parent | on HN ]