Free SSL Certs!

[mxc]

No longer rely on self-signed certs.

https://letsencrypt.org/howitworks/

 

[DrJohnZoidberg]

Been doing it for years with StartSSL.

 

[shadow_man]

Nothing new.

Wosign did free SSL with up to 100 domains on 1 cert.

It's now limited to something way less than that. The guys running LetsEncrypt are a bit douchey though. They also want to make cert validity a mere 3 months, which is ughh.

 

[mxc]

Yeah, startssl is cool but its free for non-commercial use only and they charge for certificate revocation. (Remember heartbleed?) On the other hand letsecrypt still has to make its way into browsers etc

 

[adrianx]

Yeah, startssl is cool but its free for non-commercial use only and they charge for certificate revocation. (Remember heartbleed?) On the other hand letsecrypt still has to make its way into browsers etc

Their certificates are already trusted by all major browsers.

I've been using them since 27 October when they were still invite-only.

The 90 day expiry thing is easily solved with a cron job. Let's Encrypt recommends that the cron is run once a month or once every 2 months.

In order to renew certificates simply call the letsencrypt (or letsencrypt-auto) again, and use the same values when prompted. You can automate it slightly by passing necessary flags on the CLI (see --help all), or even further using the Configuration file. The --renew-by-default flag may be helpful for automating renewal. If you’re sure that UI doesn’t prompt for any details you can add the command to crontab (make it less than every 90 days to avoid problems, say every month).

 

[CPTBoy]

Nothing new.

Wosign did free SSL with up to 100 domains on 1 cert.

It's now limited to something way less than that. The guys running LetsEncrypt are a bit douchey though. They also want to make cert validity a mere 3 months, which is ughh.

Also used them recently for one of our servers, agree the 3 months expiry is really short ...

 

[mxc]

yeah, it's (letsencrypt) a great initiative. Easy to use too.

 

[Tinuva]

Who cares if it expires after 3 months? The whole idea is to automate the whole process, eg. do it once and forget, and the cert is renewed while you sleep.

Letsencrypt is awesome. Nough said.