Koozali.org: home of the SME Server

Contribs.org Forums => General Discussion => Topic started by: Stefano on March 19, 2018, 04:17:33 PM

Title: Letsencrypt and wildcard certificates
Post by: Stefano on March 19, 2018, 04:17:33 PM

FYI:

https://gbhackers.com/free-wildcard-ssl-certificate-lets-encrypt/

Title: Re: Letsencrypt and wildcard certificates
Post by: ReetP on March 19, 2018, 11:20:49 PM

They have been working on ACME V2 for dehydrated for a while. Can't remember what the current status is... have a look on github.

https://github.com/lukas2511/dehydrated/issues/420

Some other bugs on it I think.

The contrib will need a bug and reviewing.

Title: Re: Letsencrypt and wildcard certificates
Post by: Jean-Philippe Pialasse on March 20, 2018, 09:42:59 AM

According to https://letsencrypt.org/docs/client-options/ dehydrated is compatible.

Few thoughts

- This could be time to use some registrar api to populate the dns validation
- we could stop validating hosts , would be faster and less risks of failure on a not well configured subdomain
- we could start looking at one cert per domain /per  virtualhost. Just have to decide then which one to use for imap pop and smtp. Probably the primary domain...


Fyi : 2 more releases since our import of v5