From owner-freebsd-questions@freebsd.org  Tue Dec 20 14:50:13 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 4490FC88851
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Tue, 20 Dec 2016 14:50:13 +0000 (UTC)
 (envelope-from smithi@nimnet.asn.au)
Received: from sola.nimnet.asn.au (paqi.nimnet.asn.au [115.70.110.159])
 (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id B9888179
 for <freebsd-questions@freebsd.org>; Tue, 20 Dec 2016 14:50:11 +0000 (UTC)
 (envelope-from smithi@nimnet.asn.au)
Received: from localhost (localhost [127.0.0.1])
 by sola.nimnet.asn.au (8.14.2/8.14.2) with ESMTP id uBKEnwFq019751;
 Wed, 21 Dec 2016 01:49:59 +1100 (EST)
 (envelope-from smithi@nimnet.asn.au)
Date: Wed, 21 Dec 2016 01:49:58 +1100 (EST)
From: Ian Smith <smithi@nimnet.asn.au>
To: John Levine <johnl@iecc.com>
cc: freebsd-questions@freebsd.org, simon@optinet.com
Subject: Re: ssl certificate
In-Reply-To: <mailman.95.1482235202.29010.freebsd-questions@freebsd.org>
Message-ID: <20161221012013.T26979@sola.nimnet.asn.au>
References: <mailman.95.1482235202.29010.freebsd-questions@freebsd.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 20 Dec 2016 14:50:13 -0000

In freebsd-questions Digest, Vol 655, Issue 2, Message: 7
On 19 Dec 2016 16:05:17 -0000 "John Levine" <johnl@iecc.com> wrote:

[..]

Simon sayeth:

 > >So when I find free domain registration service for my domains it will be
 > >just like LE, but until then...  ya, I have a problem, I want it free!

 > You might enjoy .tk.  Domains are free, $0.

Spammers are certainly enjoying them; ${random.alphabet.soup}.tk are 
lately probing here.  I tried locating one after noticing gmail noisily 
rejecting a .forward for a user.  Registrant details hidden, of course.

Connect:tk		ERROR:"550 unaccountable domain rejected"

 > In the meantime, sensible people are all getting their certs from
 > Let's Encrypt.

>From your earlier message:

 > There are a bunch of different open source clients for LE.  I use a 
 > cute little shell script called acme.sh for the web and mail certs on
 > my fbsd system.  The certs have to be renewed every 3 months so you 
 > definitely want to set it up so it can renew automatically.
 >
 > https://github.com/Neilpang/acme.sh

Thanks for info and link.  I'll give you 'cute', dunno about 'little' :)

cheers, Ian