Re: Lets Encrypt + IBM i web server?

I get my certs from namecheap.com. 8 bucks a year is worth the hassle.

But, you don't really need to renew. Whatever you use just get a new
certificate and import it and change assignment of the SSL application ID
to the new cert. Done and done.



Bradley V. Stone
www.bvstools.com
MAILTOOL Benefit #13 <https://www.bvstools.com/mailtool.html>: The ability
to use an IFS stream file as the body of the email (either text or html).

On Wed, Mar 6, 2019 at 4:46 PM Pete Helgren <pete@xxxxxxxxxx> wrote:

Not yet. The issue is having an issue API that would allow you to renew
a certificate (there isn't one). Rumor has it the the API has been
enhanced to allow for the certificate to be renewed. Unfortunately, I am
on 7.2 and I don't think there are any plans to backport the
enhancement. Not sure when it will be released. It will be an update to
the DCM.

Last conversation I had was focusing on the renewal, since creating the
initial certificate isn't all that hard. I have a script that can renew
the certificate using a Java ACME client but I still have to manually
update DCM with the new cert. I would imagine the whole process could
be done with the new DCM if the API's are there....won't know until
announcements are made or I can get a new Power 9 box and join the
beta.....

Pete Helgren
www.petesworkshop.com
GIAC Secure Software Programmer-Java
Twitter - Sys_i_Geek IBM_i_Geek

On 3/5/2019 2:58 PM, David Gibbs via WEB400 wrote:

Folks:

Has anyone come up with an automated way of creating & renewing Lets
Encrypt certificates with the IBM i web server?

I've got all the midrange.com sites working well with LE certs except
www.midrange.com (which runs on Frankie).

Thanks!

david

--
This is the Web Enabling the IBM i (AS/400 and iSeries) (WEB400) mailing
list
To post a message email: WEB400@xxxxxxxxxxxxxxxxxx
To subscribe, unsubscribe, or change list options,
visit: https://lists.midrange.com/mailman/listinfo/web400
or email: WEB400-request@xxxxxxxxxxxxxxxxxx
Before posting, please take a moment to review the archives
at https://archive.midrange.com/web400.