Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The default LE client was kind of a pain to work with. The docker container was better but where it really helped was the Lego golang implementation. That one 'just works' and was super easy to setup behind nginx to run automatically. It also writes a nicer config dir.


In case anybody didn't know, there are already over 10 alternative clients. There should be something for everyone:

https://community.letsencrypt.org/t/list-of-client-implement...


Still waiting on a Glassfish or Wildfly client. We managed to wrangle the standalone client to generate a certficate that can be used by glassfish, but it's not pretty. See the code here: https://github.com/hopshadoop/hopsworks-chef/blob/master/rec...


acme-tiny is another good and simple client, which I personally prefer.

I've recently compared 10 different Let's Encrypt / ACME clients: https://www.metachris.com/2015/12/comparison-of-10-acme-lets...


I forked acme-tiny the other day and replaced http-01 with dns-01. The dns-01 implementation is pretty simple and crude for now, I'll probably add dynamic dns update support at some point. All it does is print the records out and wait for you to add them manually.

https://github.com/nuxi/acme-tiny

For now I've just done enough to get a cert for a mail server.


In your review, whenever I click a "show output" link, it navigates to another page containing only "[object Object]". Can you change the href to be an onclick attribute or something like that?


Thanks for the suggestion, I'll update the post tonight. Didn't notice / cannot reproduce - it seems to work for me in all browsers.


I found the default client to work as expected. It doesn't automatically modify nginx config, but I really don't want it to. It's simple to point the config to a correct location and then just use the webroot plugin. (Granted that needed the change to allow access to hidden directory via HTTP, but that wasn't rocket science either)


Thanks for sharing your experience here, I'll go straight to lego when I go to set it up. It's hard to beat the simplicity of a Go binary for system tools like this.


How is a binary simpler then a script?


True Go binaries like lego[1] are statically compiled (zero external dependencies). No need to fuss about versions of installed dependencies, updates, package management, etc. You just run the binary and it just works.

[1]: https://github.com/xenolf/lego


Can't you package a script with all required dependencies, including the interpreter?


acme-tiny was the winner for me.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: