News for hackers. Stuff that matters.
Re:Let’s Encrypt in the spotlight by tokenizerrr on Monday July 03, 2017 @09:14PM (#14692779)
I just have an ansible role which runs against a server and SSL gets set up 100% for free. It's wonderful. One time time investment to write the ansible role, and now it takes like 5 seconds to enable for any server I'd like.
Re:Let’s Encrypt in the spotlight by toomuchtodo on Monday July 03, 2017 @09:19PM (#14692805)
So that's the provisioning process at server setup/instantiation; how do you handle the 90 day renewal?
Re:Let’s Encrypt in the spotlight by tokenizerrr on Monday July 03, 2017 @09:26PM (#14692837)
The ansible role installs my ACME client of choice (https://github.com/lukas2511/dehydrated), invokes it once, and adds a cronjob.
Re:Let’s Encrypt in the spotlight by gtf21 on Tuesday July 04, 2017 @05:04AM (#14694569)
We do the same and I found it a breeze, I even have some hooks which talk to the cloudflare API to setup the txt records for verification.
Re:Let’s Encrypt in the spotlight by toomuchtodo on Monday July 03, 2017 @09:40PM (#14692881)
Thanks!
Re:Let’s Encrypt in the spotlight by riffic on Monday July 03, 2017 @09:26PM (#14692836)
I assume the GP's ansible role writes a crontab entry to perform the renewal.