Ask HN: Easiest and least painful way of adding Lets Encrypt?

8 points by turshija 9 years ago | 8 comments

I have a Debian box (LAMP) with some legacy PHP sites where I want to put Lets Encrypt SSL. What is the most painful way of doing that without disturbing any site that's currently running on it ? Is there any tool or script which does most of the job so that I don't have to fiddle a lot with Apache/PHP config and risk to break something ? Thanks

patmcc 9 years ago |

https://caddyserver.com/ - Caddy works pretty nicely, and you should be able to use it as a reverse proxy in front of apache.

codegeek 9 years ago |

Use this to get exact instructions for your setup:

https://certbot.eff.org/

stephenr 9 years ago |

Personally I use haproxy to forward all LE related requests to certbot in standalone mode.

My email is in my profile if you want to try this and need some help.

hackerboos 9 years ago |

You can use the certbot on your local machine and setup a txt record on the DNS of the domain.

Let's Encrypt will verify ownership against that text entry.

Emc2fma 9 years ago |

Warning for anyone trying to add Lets Encrypt to GCP - absolute nightmare. Would not recommend.

marcc 9 years ago | |

Are you willing to share some details about the challenges you had?

Emc2fma 9 years ago | | |

Currently, there isn't any built-in support with AppEngine. The steps you have to go through to ssh in and verify ownership is just a hassle.

kim0 9 years ago |

kube-lego for kubernetes is just awesome!