Re: SSL cert renewals - 1 year going forward

I wonder if someone actually will implement an ACME client on IBM i which deals with the tedious task. Booth? ;-)

Aaron Bartell already did some work on that here https://www.mcpressonline.com/security/general/techtip-lets-encrypt-together but it was way too much effort for me to get working on a test site.

________________________________
From: MIDRANGE-L <midrange-l-bounces@xxxxxxxxxxxxxxxxxx> on behalf of Patrik Schindler <poc@xxxxxxxxxx>
Sent: 06 March 2020 17:13
To: Midrange Systems Technical Discussion <midrange-l@xxxxxxxxxxxxxxxxxx>
Subject: Re: SSL cert renewals - 1 year going forward

Hello Paul,

Am 06.03.2020 um 16:28 schrieb Steinmetz, Paul via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>:

For our Win and Linux servers, new tools are being looked at that will automate the SSL renewal process.

Letsencrypt for the win! Fire and forget. If you had this running once, you'll be appalled by Network Switches, HMCs, KVMs and other stuff which need to be refreshed manually.

(Note: Letsencrypt requires an official hostname, in DNS outside. I was having a look into setting up my own internal ACME server but it's way too tedious for my two devices actually requiring certificates.)

I wonder if someone actually will implement an ACME client on IBM i which deals with the tedious task. Booth? ;-)

:wq! PoC

PGP-Key: DDD3 4ABF 6413 38DE - https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.pocnet.net%2Fpoc-key.asc&amp;data=02%7C01%7C%7C7a7d8c17bcd44b491be608d7c1e94c09%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191080047464923&amp;sdata=obWf3Zi88SCxO2X1hTSlubQfAP7fZYrxT%2FQ7lFGo4HE%3D&amp;reserved=0


--
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.midrange.com%2Fmailman%2Flistinfo%2Fmidrange-l&amp;data=02%7C01%7C%7C7a7d8c17bcd44b491be608d7c1e94c09%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191080047464923&amp;sdata=2rNgXdxEUQZLv725v0bTKdgXPGITIMs6nY%2F7EpOaQ4I%3D&amp;reserved=0
or email: MIDRANGE-L-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Farchive.midrange.com%2Fmidrange-l&amp;data=02%7C01%7C%7C7a7d8c17bcd44b491be608d7c1e94c09%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191080047464923&amp;sdata=onij3xbDSXz%2FsY1gRVJ7sMZnYiDQoRLK57Vb7hvZa5w%3D&amp;reserved=0.

Please contact support@xxxxxxxxxxxx for any subscription related questions.

Help support midrange.com by shopping at amazon.com with our affiliate link: https://eur04.safelinks.protection.outlook.com/?url=https%3A%2F%2Famazon.midrange.com&amp;data=02%7C01%7C%7C7a7d8c17bcd44b491be608d7c1e94c09%7C84df9e7fe9f640afb435aaaaaaaaaaaa%7C1%7C0%7C637191080047464923&amp;sdata=utqxkmB2YVD9Xphl2IjtiF175PfOMoooDf5VFp5QobE%3D&amp;reserved=0