Ponzu – An open-source HTTP server framework and CMS in Go

Re:Ponzu – An open-source HTTP server framework and CMS in Go by patrickmn on Sunday April 09, 2017 @01:32PM (#14073354)

> Automatic & Free SSL/TLS

A couple of years ago, I wouldn't have believed we would be seeing essentially zeroconf TLS/PKI in software anytime soon. Letsencrypt, the "encrypt everything" movement, and people like Steve, Ponzu's author, have improved internet security tremendously at a time when it is critically needed.

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by nilslice on Sunday April 09, 2017 @08:38PM (#14075154)

Thank you, but all credit is due to the Let's Encrypt team. It is an amazing thing they have done.

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by srcmap on Monday April 10, 2017 @02:37PM (#14081295)

Steve,

Quick question, must the server use "Let's Encrypt" be public on internet to use it?

Like: Can I use private ip (10.1.1.x) behind the NAT and still use "Let's Encrypt" + your CMS/server?

Thanks

[ Parent | on HN ]

Re:Ponzu – An open-source HTTP server framework and CMS in Go by nilslice on Monday April 10, 2017 @04:19PM (#14082170)

Sort of. If you're OK with manually updating the certificates after initially fetching them from L.E., then you can use them. However L.E. must be able to communicate directly with the server via HTTP to prove authority and send you the certificate.

There are other tests that the ACME protocol can do to determine authority over a domain name, but Ponzu's implementation doesn't handle them.

Sorry if that doesn't fully answer your question.

[ Parent | on HN ]