Ask HN: Easiest and least painful way of adding Lets Encrypt?

Posted by turshija on Friday January 20, 2017 @06:46PM
from the ask-hn dept.

I have a Debian box (LAMP) with some legacy PHP sites where I want to put Lets Encrypt SSL. What is the most painful way of doing that without disturbing any site that's currently running on it ? Is there any tool or script which does most of the job so that I don't have to fiddle a lot with Apache/PHP config and risk to break something ? Thanks

( 8 comments | 8 points | on HN )

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by patmcc on Friday January 20, 2017 @07:48PM (#13448144)

https://caddyserver.com/ - Caddy works pretty nicely, and you should be able to use it as a reverse proxy in front of apache.

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by codegeek on Friday January 20, 2017 @07:26PM (#13448062)

Use this to get exact instructions for your setup:

https://certbot.eff.org/

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by stephenr on Saturday January 21, 2017 @12:04AM (#13448919)

Personally I use haproxy to forward all LE related requests to certbot in standalone mode.

My email is in my profile if you want to try this and need some help.

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by hackerboos on Saturday January 21, 2017 @03:23PM (#13451906)

You can use the certbot on your local machine and setup a txt record on the DNS of the domain.

Let's Encrypt will verify ownership against that text entry.

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by Emc2fma on Saturday January 21, 2017 @12:12PM (#13450956)

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by marcc on Saturday January 21, 2017 @10:27PM (#13453436)

Are you willing to share some details about the challenges you had?

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by Emc2fma on Tuesday January 24, 2017 @02:07PM (#13474436)

Currently, there isn't any built-in support with AppEngine. The steps you have to go through to ssh in and verify ownership is just a hassle.

[ Parent | on HN ]

Re:Ask HN: Easiest and least painful way of adding Lets Encr... by kim0 on Saturday January 21, 2017 @08:09PM (#13453011)

kube-lego for kubernetes is just awesome!

[ Parent | on HN ]