News for hackers. Stuff that matters.

A comment on Uacme: ACMEv2 client written in plain C with minimal dependencies. Parent comment

Re:Uacme: ACMEv2 client written in plain C with minimal depe... by m_sahaf on Sunday August 21, 2022 @11:34AM (#32541163)
You can use Caddy to automatically fetch certs and keep them renewed without much hassle[0].

Disclaimer: I'm affiliated with Caddy

[0]: https://caddy.community/t/using-caddy-to-keep-certificates-r...

[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by qbasic_forever on Sunday August 21, 2022 @12:44PM (#32541909)
Yeah IMHO this is the way to go. Individual web apps managing their own SSL certs is a longterm mess. Only your proxy or HTTP gateway/router should ever touch or know about SSL certs.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by lapser on Sunday August 21, 2022 @03:33PM (#32543600)
Caddy is great for web servers, but it's still not possible to have it run commands post certificate provisioning. So it's kind of a non-starter for anything but web-servers as there is no way to tell a different system to reload certs.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by francislavoie on Sunday August 21, 2022 @04:55PM (#32544328)
We're working on this! Hoping to have our new event dispatching system ready in the next few months. This'll let you hook into the post-issuance event and do whatever you want afterwards.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by lapser on Sunday August 21, 2022 @04:56PM (#32544339)
Yeah! I saw the PR. Looking forward!
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by mccorrinall on Sunday August 21, 2022 @12:19PM (#32541630)
Not affiliated with caddy, but caddy is awesome! I use it all the time.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by MatthiasPortzel on Sunday August 21, 2022 @12:15PM (#32541588)
Apache also provides a 1-at party ACME client in the form of a module, mod_md.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by goodpoint on Sunday August 21, 2022 @03:51PM (#32543769)
I'd rater use Nginx. At least it's not a statically linked blob.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by francislavoie on Sunday August 21, 2022 @04:52PM (#32544294)
Static linking is a huge advantage. I don't understand the point you're trying to make.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by goodpoint on Monday August 22, 2022 @08:29AM (#32550396)
Static linking is a huge disadvantage when it comes do security updates.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by m_sahaf on Monday August 22, 2022 @04:28PM (#32556774)
C is a huge disadvantage when it comes do security.
[ Parent | on HN ]
Re:Uacme: ACMEv2 client written in plain C with minimal depe... by goodpoint on Tuesday August 23, 2022 @10:03AM (#32565067)
No, that depends entirely on how it's written.
[ Parent | on HN ]