Re:I still have an old-school cert on my HTTPS site
by yjftsjthsd-h on Thursday January 05, 2023 @07:46PM
(#34269347)
Yes, but the author doesn't seem to care about how easy it is to use existing software; all the criticisms here seem to be attacking the underlying protocol and nitpicking implementation details. I'm sure if she looked at mod_md she'd download the source code and find a bunch of (in her view, at least) problems.
Apache has a little known module as part of the build, at least in Ubuntu: mod_md.
Use this, it is trivial to set up, and completely automated the Let's Encrypt workflow and renewal, no external stuff necessary. It is as simple as adding a few lines to the global config, remove almost all SSL config and restarting the server (twice).