How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern • Hacker News Board

Re: How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern

#21

Post by no1youknowz » Wed, Feb 01, 2017, 10:38 AM UTC

Operyl wrote: post #12

sideproject wrote: post #7

I've googled this subject a number of times over the years and this seems to be the most thorough answer. Thanks for providing it! However, for a small startup (like mine), I think it's still a bit too much work to get this working. I know that there aren't any other "automated" options out there anyway. Perhaps one day. :)

It really isn't, I was able to implement something similar in a matter of about a month by myself at my current employer.

Would you be able to document how you did this, so that others like the GP and myself can benefit?

Thanks

Re: How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern

#22

Post by scurvy » Wed, Feb 01, 2017, 3:34 PM UTC

seanp2k2 wrote: post #19

scurvy wrote: post #17

Earlier quoted context omitted.

I was also wondering about this. I would have put in the engineering effort to migrate to nginx (at least as a front-end proxy) from Apache for this. Seems like a lot of reloads that could be avoided (even doing graceful reloads in Apache gives me the willies).

http://kb.linuxvirtualserver.org/wiki/IPVS This stuff is ancient but still works great.

LVS/IPVS is OK, but what does it have to do with SSL termination and certificate churn?

Re: How Etsy Manages HTTPS and SSL Certificates for Custom Domains on Pattern

#23

Post by Operyl » Thu, Feb 02, 2017, 4:59 AM UTC

no1youknowz wrote: post #21

Operyl wrote: post #12

Earlier quoted context omitted.

It really isn't, I was able to implement something similar in a matter of about a month by myself at my current employer.

Would you be able to document how you did this, so that others like the GP and myself can benefit? Thanks

It was just a matter of the same thing Etsy did, for the most part, minus Apache/PHP plus nginx/Python. I used the acme python module, and Celery for queuing. It's pretty engrained into my existing system that I don't think it'd be much use for me to explain it too heavily.