SSL Certificates
-
Some of the SSL folks do verify information. We actually had our SSL Certificate denied once because our Address on file with the SSL site at the time still had an old street name on it... Of course, all it took was an edit to fix that, but still...
-
-
@aaronstuder Thanks again.
-
@BRRABill No Problem. I love saving money too!
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
-
@aaronstuder said in SSL Certificates:
@BRRABill No Problem. I love saving money too!
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
I think it will.... I'm already using it for some Personal stuff... I'd run it for a business site or a forum (cough, cough) any day.
-
@aaronstuder said
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
Maybe I'm lucky, but I'm not sure how much cheaper it can get that $5.
I mean, a beer costs more than that, and I drink a lot of beer.
-
@BRRABill said in SSL Certificates:
@aaronstuder said
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
Maybe I'm lucky, but I'm not sure how much cheaper it can get that $5.
I mean, a beer costs more than that, and I drink a lot of beer.
Right, but I would love a $20 a year wildcard cert
-
@dafyre said in SSL Certificates:
@aaronstuder said in SSL Certificates:
@BRRABill No Problem. I love saving money too!
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
I think it will.... I'm already using it for some Personal stuff... I'd run it for a business site or a forum (cough, cough) any day.
You mean like this one that is running on NodeBB?
-
@aaronstuder said in SSL Certificates:
@BRRABill said in SSL Certificates:
@aaronstuder said
My hope is that Let's Encrypt is going to force paid for SSL certs to be more reasonable.
Maybe I'm lucky, but I'm not sure how much cheaper it can get that $5.
I mean, a beer costs more than that, and I drink a lot of beer.
Right, but I would love a $20 a year wildcard cert
Other than loss of something there's no reason that wildcard certs need to cost any more than a single entry quote. The whole thing was just a way to make money!
-
@JaredBusch How do you do that?
-
@aaronstuder said in SSL Certificates:
@JaredBusch How do you do that?
On the proxy of course. NodeBB is not exposed directly. NodeBB runs on a non-standard port that the proxy just redirects to.
-
@JaredBusch No, I get that part. How do you get a cert with sub-domains?
-
@aaronstuder said in SSL Certificates:
@JaredBusch No, I get that part. How do you get a cert with sub-domains?
They're called wildcard certs, and the same place you'd buy a normal cert.
-
@travisdh1 said in SSL Certificates:
@aaronstuder said in SSL Certificates:
@JaredBusch No, I get that part. How do you get a cert with sub-domains?
They're called wildcard certs, and the same place you'd buy a normal cert.
Your missing the point. He has a Let's Encrypt Wildcard Cert. - They don't offer wildcard certs....
-
@aaronstuder
This, maybe?
Can I get a certificate for multiple domain names (SAN certificates)?
Yes, the same certificate can apply to several different names using the Subject Alternative Name (SAN) mechanism. The Let's Encrypt client automatically requests certificates for multiple names when requested to do so. The resulting certificates will be accepted by browsers for any of the domain names listed in them. -
@BRRABill said in SSL Certificates:
@aaronstuder
This, maybe?
Can I get a certificate for multiple domain names (SAN certificates)?
Yes, the same certificate can apply to several different names using the Subject Alternative Name (SAN) mechanism. The Let's Encrypt client automatically requests certificates for multiple names when requested to do so. The resulting certificates will be accepted by browsers for any of the domain names listed in them.The Let's Encrypt client software will get you certs for every domain being served tho. No need for a wildcard when you can
letsencrypt-autoAnd get certs for every valid domain being served on the server?
-
@travisdh1 right. No where did I say it was a wildcard.
-
A SAN cert is not a WildCard cert.
-
Side note, I need to run the renew script. I never got the warning email
-
@JaredBusch said in SSL Certificates:
Side note, I need to run the renew script. I never got the warning email
That sucks. The renewal period is so short though, setting up a cron job to do it before expiration seems only sensible.
