Author Topic: Lets Encrypt opens to all  (Read 2737 times)

JasonD

  • Inner Core
  • Hero Member
  • *
  • Posts: 1420
  • Look at THAT!!!!
    • AOL Instant Messenger - JasonDDuke
    • View Profile
    • Domain Names
    • Email
Lets Encrypt opens to all
« on: December 04, 2015, 09:52:48 AM »
https://letsencrypt.org/

Free SSL certificates for all ... I expect to see other registration organisations now following suit.

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 9325
    • View Profile
Re: Lets Encrypt opens to all
« Reply #1 on: December 04, 2015, 04:29:48 PM »
Strange. You need to client.

You do a git clone of the Let's Encrypt repo and install the client on your machine - *nix flavors running Python 2.6 or 2.7 only (no Python 3.x) and having root access - and can get an install certs automatically.

OK... so I use git almost daily, but let's say that anything that expects a user to know how to use git is aimed at people who are more tech savvy than your average Wordpress user. But you always need root access to install a cert, so I guess if you can't run a few simple git commands, you probably have no business with root access on a server!

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 9325
    • View Profile
Re: Lets Encrypt opens to all
« Reply #2 on: December 04, 2015, 04:34:46 PM »
Looking over the docs, this actually looks like once you're up and running, it's probably easier than getting a cert and installing via WHM or some such thing.

That said, it's still enough of a hassle that I'm not rushing right out.

I expect that what this will allow is for ISPs to just automate it and all new accounts will automatically get https

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 9325
    • View Profile
Re: Lets Encrypt opens to all
« Reply #3 on: September 27, 2016, 05:49:55 AM »
I just found out that webmin/virtualmin now has this built in.

It's literally as simple as
 - check the SSL checkbox to enable it for the server, which sets up the vhost settings for port 443
 - go to Manage SSL Certificate
 - Click on Let's Encrypt
 - click Request Certificate
 - restart Apache
 
And you're now https with no browser warning like from a self-signed cert.

bill

  • Devil's Avocado
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1286
  • Avast!
    • View Profile
    • Email
Re: Lets Encrypt opens to all
« Reply #4 on: September 27, 2016, 06:29:59 AM »
I've been waiting for some hosts to get this in cPanel. The next cPanel has it included as a standard as well. It should make adding certs a breeze.

Torben

  • Global Moderator
  • Sr. Member
  • *****
  • Posts: 305
    • View Profile
Re: Lets Encrypt opens to all
« Reply #5 on: September 27, 2016, 08:31:22 AM »
I've been using Let's Encrypt for a month now and I'm very happy. It's so easy to use and I don't even use control panels for my servers.

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 9325
    • View Profile
Re: Lets Encrypt opens to all
« Reply #6 on: September 27, 2016, 03:44:48 PM »
I've been using Let's Encrypt for a month now and I'm very happy. It's so easy to use and I don't even use control panels for my servers.

I was debating standard install of a cert generated elsewhere or sucking it up and installing Lets Encrypt and was thinking the install would be better longterm (on a VPS with several sites). And then out of curiousity I went to Manage SSL Certificates in Virtualmin for the site in question and was surprised to see the Let's Encrypt link. Five minutes later, the site was humming along on https:

>>CPanel

I assume that is not a choice you can make. In any case, once made, you pretty much have to burn a server down to get off CPanel because it gets in everywhere.

I recommend giving Webmin/Virtualmin a look if you have a chance. I think I would describe it somewhat like the difference between Windows and a Linux desktop GUI. CPanel takes over at a basic level (for many years you couldn't run git safely on a CPanel server, though you would think there would be no relation between the two). Webmin is more like a graphical layer over the command line.

bill

  • Devil's Avocado
  • Global Moderator
  • Hero Member
  • *****
  • Posts: 1286
  • Avast!
    • View Profile
    • Email
Re: Lets Encrypt opens to all
« Reply #7 on: September 28, 2016, 12:48:03 AM »
I recommend giving Webmin/Virtualmin a look if you have a chance.

That sounds like something to look at. My cPanel is imposed upon me by our favorite shared hosting, which I have yet to fully extract myself from (Same one that hosts this site). I'll look at Webmin for some of my more flexible servers.

BoL

  • Inner Core
  • Hero Member
  • *
  • Posts: 1211
    • View Profile
Re: Lets Encrypt opens to all
« Reply #8 on: September 28, 2016, 08:16:33 AM »
There's also a few bash scripts floating around that can be run in cron to auto-renew certs.

ergophobe

  • Inner Core
  • Hero Member
  • *
  • Posts: 9325
    • View Profile
Re: Lets Encrypt opens to all
« Reply #9 on: September 28, 2016, 04:47:08 PM »
The Webmin thing has an autorenew option too