On 11/10/18 08:30, Per Jessen wrote:
Paul Groves wrote:
Hi all,
I have recently learned of letsencrypt.org and their service sslforfree.com. Does anyone use this? letsencrypt yes, sslforfree no. Been using letsencrypt for two years or thereabouts.
The only problem I have with SSL For Free is that the certificates expire after 90 days. Yes, that is letsencrypt standard.
I can understand why they do this so as not to have lots of unused certificates It's more to make sure the identity of the certificate holder remains correct. The LE certificates are domain-validation only.
but as I work on many sites any manually renewing them every 3 months would be a right pain in the proverbial.
Is there a way to obtain a free certificate from SSL For Free and have it renew automatically? With LE it is certainly easy, I don't know about sslforfree.
Hi Per, The LetsEncrypt service seems like the way to go then if the certificates can be renewed automatically. How would I go about doing this? Also, from my initial reading of domain validation, I have to put a nonce in a file on the webserver or in a TXT record on he DNS. Although I use freedns.afraid.org and this only allows a TTL of 3600 which cannot be changed. Not sure if this would be a problem. How do you validate your domains? Thank you Paul -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org