Ask HN: Easiest and least painful way of adding Lets Encrypt?

#1

Post by turshija » Fri, Jan 20, 2017, 11:46 PM UTC

I have a Debian box (LAMP) with some legacy PHP sites where I want to put Lets Encrypt SSL. What is the most painful way of doing that without disturbing any site that's currently running on it ? Is there any tool or script which does most of the job so that I don't have to fiddle a lot with Apache/PHP config and risk to break something ? Thanks

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#2

Post by codegeek » Sat, Jan 21, 2017, 12:26 AM UTC

Use this to get exact instructions for your setup:

https://certbot.eff.org/

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#3

Post by patmcc » Sat, Jan 21, 2017, 12:48 AM UTC

https://caddyserver.com/ - Caddy works pretty nicely, and you should be able to use it as a reverse proxy in front of apache.

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#4

Post by stephenr » Sat, Jan 21, 2017, 5:04 AM UTC

Personally I use haproxy to forward all LE related requests to certbot in standalone mode.

My email is in my profile if you want to try this and need some help.

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#5

Post by Emc2fma » Sat, Jan 21, 2017, 5:12 PM UTC

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#6

Post by hackerboos » Sat, Jan 21, 2017, 8:23 PM UTC

You can use the certbot on your local machine and setup a txt record on the DNS of the domain.

Let's Encrypt will verify ownership against that text entry.

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#7

Post by kim0 » Sun, Jan 22, 2017, 1:09 AM UTC

kube-lego for kubernetes is just awesome!

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#8

Post by marcc » Sun, Jan 22, 2017, 3:27 AM UTC

Emc2fma wrote: post #5

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

Are you willing to share some details about the challenges you had?

Re: Ask HN: Easiest and least painful way of adding Lets Encrypt?

#9

Post by Emc2fma » Tue, Jan 24, 2017, 7:07 PM UTC

marcc wrote: post #8

Emc2fma wrote: post #5

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

Are you willing to share some details about the challenges you had?

Currently, there isn't any built-in support with AppEngine. The steps you have to go through to ssh in and verify ownership is just a hassle.