web2py deployment: LetsEncrypt Nginx auto renew deployment script

[Mark Graves]

Has anyone used LetsEncrypt certificates or followed the instructions below with web2py?

https://www.digitalocean.com/community/tutorials/how-to-secure-nginx-with-let-s-encrypt-on-ubuntu-14-04

https://www.nginx.com/blog/free-certificates-lets-encrypt-and-nginx/

What are your thoughts of the status of LetsEncrypt for a production database despite its early status?

Thanks!

-Mark

[Anthony]

Have a look at this client: https://hlandau.github.io/acme/.

Anthony

[Niphlod]

better than http, for sure. Better than self-signed, an order of magnitude. But still I'd go for 60$ for basic cert for a production site rather than using letsentcypt.

[Mark Graves]

Thank Niphlod and Anthony.

I agree.  The technology is not quite mainstream enough to really rely on yet.

-Mark

--
Resources:
- http://web2py.com
- http://web2py.com/book (Documentation)
- http://github.com/web2py/web2py (Source code)
- https://code.google.com/p/web2py/issues/list (Report Issues)
---
You received this message because you are subscribed to a topic in the Google Groups "web2py-users" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/web2py/Mq_1YfEjrC8/unsubscribe.
To unsubscribe from this group and all its topics, send an email to web2py+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Anthony]

On Friday, May 27, 2016 at 5:39:04 AM UTC-4, Mark Graves wrote:

Thank Niphlod and Anthony.

I agree.  The technology is not quite mainstream enough to really rely on yet.

About a month ago, it was already the third largest certificate authority by number of certificates, and since then it has nearly doubled its number of issued certificates. Wordpress now offers it on all (million-plus) custom domains that they host. And it has been integrated with the Caddy web server for automatic HTTPS.

Anthony

[Mark Graves]

Anthony,

Any idea if the ISRG root CA is included in browsers yet?

https://community.letsencrypt.org/t/which-browsers-and-operating-systems-support-lets-encrypt/4394

This is the most recent article I could find but it is over 6 months old.

-Mark

--

[Anthony]

No idea, but I think browser coverage is very good, except for some very old systems.

Anthony

To unsubscribe from this group and all its topics, send an email to web2py+unsubscribe@googlegroups.com.