News for hackers. Stuff that matters.

A comment on Another free CA as an alternative to Let's Encrypt. Parent comment

Re:Another free CA as an alternative to Let's Encrypt by magicalhippo on Friday August 20, 2021 @07:39AM (#28244926)
With the DNS option the machine doing the request doesn't have to be the machine using the certificate though.

I have a separate machine doing the DNS challenge and the cert is then distributed to the machine needing it.

Technically true for the regular web challenge, but easier with DNS I think.

[ Parent | on HN ]
Re:Another free CA as an alternative to Let's Encrypt by larntz on Friday August 20, 2021 @08:57AM (#28245444)
I'm doing the same for my personal/home lab stuff. I've been using https://github.com/joohoi/acme-dns for the dns server running on a small vps for all my internal certificates and I haven't had any issues with it.
[ Parent | on HN ]
Re:Another free CA as an alternative to Let's Encrypt by mimimi31 on Friday August 20, 2021 @08:34AM (#28245288)
This is what I do as well. I have set up acme.sh[1] on a Raspberry Pi on my home network, which isn't accessible from the outside. It is triggered every night by a systemd timer and renews (using the DNS challenge) and deploys all expiring certificates.

[1] https://github.com/acmesh-official/acme.sh

[ Parent | on HN ]