Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
1–10 of 50 posts
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#2I wrote up my own HOWTO for nginx just the other day.https://www.uhoreg.ca/blog/20160218-1757 I used the acme-tiny client instead of the official client. My post is mostly aimed at Debian-based distributions, but should be easily adaptable to others.
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#3I was hoping this was an nginx module where you could specify something like `ssl_letsencrypt on;` and be done with it.
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#4I was hoping this was an nginx module where you could specify something like `ssl_letsencrypt on;` and be done with it.
Me too. I'm disappointed, this would be THE killer feature. Hope they are working on it (they should imho.)
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#5How ironic. I just added https to my site and was searching for a solution to this problem. I ended up using certonly --standalone as described here and it worked like a charm: https://www.digitalocean.com/community/tutorials/how-to-secu...
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#6I was hoping this was an nginx module where you could specify something like `ssl_letsencrypt on;` and be done with it.
Caddy has this feature and it's amazing. https://caddyserver.com/docs/automatic-https
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#7Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#8I was hoping this was an nginx module where you could specify something like `ssl_letsencrypt on;` and be done with it.
If you're open to using OpenResty (basically nginx with some additional plugins and Lua integration), I've coincidentally been working on a plugin to make all of this completely automatic with Let's Encrypt (taking advantage of the relatively new ssl_certificate_by_lua functionality OpenResty provides): https://github.com/GUI/lua-resty-auto-ssl We just rolled it out to our first production site last week, but any feedback would be welcome.
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#9I was hoping this was an nginx module where you could specify something like `ssl_letsencrypt on;` and be done with it.
Or better yet, make "ssl_letsencrypt on;" the default. Make it so that newbies can just apt-get install nginx/apache/lighttpd/etc. and have https up and running, no questions asked. The real reason https adoption isn't up to par has less to do with people not willing to spend money, and more because it's not up by default. Now that https is free, please make it enabled by default.
Re: Using Free SSL/TLS Certificates from Let’s Encrypt for Nginx
#10The official let's encrypt client is very heavy-weight. In my case I've build a much simpler thing using acmetool (https://github.com/hlandau/acme) which is mcuh simpler to use and nicely runs without root rights.
In my case, a lot of the routing of domains to customers is stored in a postgres database and a trigger fires an event anyways, so I have a little daemon that listens to these events and the fires off acmetool as needed in order go generate certificates.
I just completed this last week, so when I've seen this article here, I thought that I just wasted some time over this because now there's an integrated nginx solution, but thankfully, this is just an article about doing what I was doing using a tool that's more complicated to use and brings half of an OS installation as dependencies.
For those interested, https://gist.github.com/pilif/1e2610dd7aa57323e0b2 is the script in question. It's really a quick hack, but it works very well for me to auto-create nginx config files.