LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Best place for free/cheap ssl cert? (https://www.linuxquestions.org/questions/slackware-14/best-place-for-free-cheap-ssl-cert-4175611843/)

enine 08-12-2017 07:07 PM

Best place for free/cheap ssl cert?
 
I used startssl last time but seems to be some issues with them now. Whats your go to?

astrogeek 08-12-2017 07:12 PM

LetsEncrypt is the only game in town I am aware of which issues certs recognized by the main browsers.

I use their certs now for all the sites I support.

UPDATE ** I had not looked at their news for a while, but they will also begin issuing wildcard certs in January!

enine 08-13-2017 09:38 AM

Thanks,

which ACME client are you using on Slackware?

willysr 08-13-2017 09:54 AM

Try this script

kazzan 08-13-2017 11:14 AM

I’m using, and would recommend the bash based GetSSL client.
I would never use or recommend certbot in any environment.

Chuck56 08-13-2017 12:34 PM

Quote:

Originally Posted by kazzan (Post 5747832)
I’m using, and would recommend the bash based GetSSL client.
I would never use or recommend certbot in any environment.

Another example is Dehydrated https://www.aaflalo.me/2016/09/dehyd...-lets-encrypt/

There's a Slackbuild too https://slackbuilds.org/repository/1...em/dehydrated/

Enjoy!

astrogeek 08-13-2017 12:35 PM

Quote:

Originally Posted by enine (Post 5747813)
which ACME client are you using on Slackware?

I was not comfortable installing someone else' automated script on some of my systems, so I set things up to generate all the certs on a local machine, then upload only the certs to the target servers via ssh/sftp.

It is a manual operation and requires no elevated permission to generate the certs.

I started with letsencrypt-nosudo and modified it slightly for better convenience in my own environment.

drgibbon 08-13-2017 11:57 PM

Quote:

Originally Posted by enine (Post 5747637)
I used startssl last time but seems to be some issues with them now. Whats your go to?

That's true, the root certs have been dropped from major browsers for a while (e.g., Mozilla, Google, and Apple have all revoked trust).


All times are GMT -5. The time now is 04:19 PM.