News for hackers. Stuff that matters.
Re:All extensions disabled due to expiration of intermediate... by Abishek_Muthian on Friday May 03, 2019 @11:33PM (#19824264)
Some shared hosting like Bluehost now provide LetsEncrypt by default for all their sites with auto-renewal (But I don't recommend Bluehost shared plans for anything even closer to serious hobby due to absurd downtimes like most other shared hosting).

I used manual renewal for LetsEncrypt for about 4 websites on other shared hosts & renewing them every 3 months was a pain; had to keep reminders and schedules just not to miss renewals until I synchronised their renewal schedules to batch (manual) renewing them.

I had automated renewal for 1 website on a cloud server, it was a one time effort, I never had to bother about SSL cert for that site and the most favourable of them all.

Re:All extensions disabled due to expiration of intermediate... by revvx on Friday May 03, 2019 @11:50PM (#19824323)
Another option is using a Web Server/Reverse Proxy that supports Let's Encrypt automatically, like Caddy [1]. I believe Apache HTTPD has partial support [2], too.

[1] https://caddyserver.com

[2] https://httpd.apache.org/docs/2.4/mod/mod_md.html

Re:All extensions disabled due to expiration of intermediate... by glitchcrab on Saturday May 04, 2019 @01:20AM (#19824619)
Traefik is another option here for a reverse proxy with automated renewals; I use it in a ton of places.

https://traefik.io

Re:All extensions disabled due to expiration of intermediate... by Abishek_Muthian on Saturday May 04, 2019 @12:21AM (#19824418)
Apache HTTPD looks interesting, so using which we renew LetsEncrypt cert without using certbot?
Re:All extensions disabled due to expiration of intermediate... by revvx on Saturday May 04, 2019 @12:29AM (#19824442)
It requires some fiddling and it's in experimental state, but yes! Here's the documentation:

https://github.com/icing/mod_md/wiki/Migration

Re:All extensions disabled due to expiration of intermediate... by nsomaru on Saturday May 04, 2019 @12:07AM (#19824384)
Nginx works well and there's a tool that automates most of the extra config stuff for you.
Re:All extensions disabled due to expiration of intermediate... by schwurb on Saturday May 04, 2019 @03:44AM (#19825046)
> had to keep reminders and schedules just not to miss renewals until I synchronised their renewal schedules to batch (manual) renewing them.

Another use case for the app I am developing! The basic idea: You can enter an item (i.e. "MyOwnShop Cert") into the list. From that time on, it will be tracked how much time passed since the item was entered or renewed (by clicking the renew button). The item with the longest time since entering/renewing is at the top of the list.

Compared to schedules and reminders it has the advantage that the item is not out of our mind once the reminder or schedule pasts. It just sits there dutifully and its timer keeps increasing.

I use it for keeping up with middle-term contacts ("Wow, I have not written Carl for 3 weeks?") and health-related issues. Logging in stuff that easily spoils would be another use case. And, apparently, cert renewals :)

Re:All extensions disabled due to expiration of intermediate... by king_phil on Saturday May 04, 2019 @03:18AM (#19824971)
I own a webhosting provider. We offer Let's Encrypt with automatic issuing and renewal, securing 184,961 hostnames (SANs) at this moment.

We issue certificates automatically if none is existing when connecting to a website and renew the certificates in batches 30 days before they expire. When renewing, we merge certificates/hostnames into bigger certificates with 90 hostnames so we don't have so many moving parts.

If renewal would break, however (as it did once or twice before), nothing bad would happen because on page load there would be a new certificate issued.