Re:Milestone: 100M Certificates Issued
by simias on Thursday June 29, 2017 @08:59AM
(#14662887)
I was in the same boat, I didn't like having to run python on my server just to renew a SSL certificate. Still, a few months ago I decided to give it a try and I don't regret it. The certbot script is packaged in FreeBSD, it wasn't painful at all to setup and a crontask later it was over. Definitely beats the crappy free "startssl" certificates that I used previously.
[ Parent
| on HN ]
There also are a lot of alternative [1] implementations which are less bloated, some are really small with only some hundred lines of code and few dependencies.
acme.sh runs in pure shell, no need to install Python. It's my goto client and it just works.. everywhere.
Re:Milestone: 100M Certificates Issued
by theandrewbailey on Thursday June 29, 2017 @09:56AM
(#14663325)
Seconded. I love that it supports custom port numbers, so I can use my not privileged web server port.
acme.sh + static verification is indeed a very nice zero maintenance solution.
Re:Milestone: 100M Certificates Issued
by icebraining on Thursday June 29, 2017 @09:23AM
(#14663055)
If you use the DNS verification, you could run the client on your local machine and then upload the cert.
I started writing a small utility to do just that (and then upload the cert to CPanel using their API). It works, though I'm lazy to make it reliable enough for release.