Re: Let's Encrypt, free SSL/TLS certs

I may need to try this sooner rather than later simply for a job I'm
working on.

The credit card company we're dealing with for a project can use anything
but port 80 or 443 for callbacks (web payment portal company) because they
don't "want" to file the load of PCI paperwork for different ports (dont
get me started).

So, I created a subdomain for testing and now need a certificate for that
subdomain... I'm going to give it a try here. 90 days should be enough for
me to get the testing done at least.

Brad
www.bvstools.com

On Tue, Jan 12, 2016 at 10:34 AM, Porterfield, Sean <SPorterfield@xxxxxxxx>
wrote:

LE certificates are cross signed and trusted by all modern browsers.
(This covers the second sentence/paragraph of Brad's reply.)

They are only valid for 90 days, though, so manually running through DCM
is not effective unless you have too much time on your hands.

nginx is supported by the LE client, so Aaron may be able to automate the
renewal of that with little difficulty.

There are other options for less than $60/yr, and this is not the first
free certificate provider. AFAIK, they are the first to automate the
process. LE does not support wildcard certificates.
--
Sean Porterfield


-----Original Message-----
From: Bradley Stone
Sent: Monday, 11 January, 2016 13:21

It should work fine no matter the CA... as long as your application
"trusts" the CA.

If you use this and you have to tell a user how to "trust" it with your
application (no matter the platform), it may not be the best solution until
the big players include them in the standard CA lists.

Brad
www.bvstools.com

On Mon, Jan 11, 2016 at 11:50 AM, Nathan Andelin <nandelin@xxxxxxxxx>
wrote:

The above is free for securing websites. I am giving it a test
drive this week with nginx on IBM i.

I've wondered for years if/when the price of certificate-authority
services would come down. It seems like such a racket to be able to
charge $60+ per year to host one. The prices of wildcard certificates
are way out of line, IMHO. I was beginning to wonder if the Mafia

controlled the syndicate.

________________________________

This email is confidential, intended only for the named recipient(s) above
and may contain information that is privileged. If you have received this
message in error or are not the named recipient(s), please notify the
sender immediately and delete this email message from your computer as any
and all unauthorized distribution or use of this message is strictly
prohibited. Thank you.
--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxx
Before posting, please take a moment to review the archives
at http://archive.midrange.com/web400.