Re: Lets Encrypt + IBM i web server?

[Pete Helgren <pete@xxxxxxxxxx>]

Not yet.  The issue is having an issue API that would allow you to renew 
a certificate (there isn't one).  Rumor has it the the API has been 
enhanced to allow for the certificate to be renewed. Unfortunately, I am 
on 7.2 and I don't think there are any plans to backport the 
enhancement.  Not sure when it will be released. It will be an update to 
the DCM.

Last conversation I had was focusing on the renewal, since creating the 
initial certificate isn't all that hard.  I have a script that can renew 
the certificate using a Java ACME client but I still have to manually 
update DCM with the new cert.  I would imagine the whole process could 
be done with the new DCM if the API's are there....won't know until 
announcements are made or I can get a new Power 9 box and join the beta.....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
Twitter - Sys_i_Geek  IBM_i_Geek

On 3/5/2019 2:58 PM, David Gibbs via WEB400 wrote:
> Folks:
>
> Has anyone come up with an automated way of creating & renewing Lets 
> Encrypt certificates with the IBM i web server?
>
> I've got all the midrange.com sites working well with LE certs except 
> www.midrange.com (which runs on Frankie).
>
> Thanks!
>
> david