Date: Mon, 27 Jan 2020 08:42:46 -0800 From: Freddie Cash <fjwcash@gmail.com> To: Rick Macklem <rmacklem@uoguelph.ca> Cc: "freebsd-current@FreeBSD.org" <freebsd-current@freebsd.org> Subject: Re: how to use the ktls Message-ID: <CAOjFWZ7GMy5X-RNLLBNwJ%2BeBuoXxYnQ1T-qo5KYigYoKzEuP_Q@mail.gmail.com> In-Reply-To: <CAOjFWZ4hB5J1FNsbRsTy4NUGMsoHzxsbVq=mHeo59RPmduwJeQ@mail.gmail.com> References: <YQBPR0101MB142760894682CA3663CB53BDDD3F0@YQBPR0101MB1427.CANPRD01.PROD.OUTLOOK.COM> <5be57c87-90fe-fcbe-ea37-bdb1bcff2da8@FreeBSD.org> <YQBPR0101MB1427F6950084C3CA30713A75DD080@YQBPR0101MB1427.CANPRD01.PROD.OUTLOOK.COM> <CAOjFWZ4hB5J1FNsbRsTy4NUGMsoHzxsbVq=mHeo59RPmduwJeQ@mail.gmail.com>
index | next in thread | previous in thread | raw e-mail
On Mon, Jan 27, 2020 at 8:40 AM Freddie Cash <fjwcash@gmail.com> wrote: > On Sun, Jan 26, 2020 at 12:08 PM Rick Macklem <rmacklem@uoguelph.ca> > wrote: > >> Oh, and for anyone out there... >> What is the easiest freebie way to test signed certificates? >> (I currently am using a self-signed certificate, but I need to test the >> "real" version >> at some point soon.) >> > > Let's Encrypt is what you are looking for. Create real, signed, > certificates, for free. They're only good for 90 days, but they are easy > to renew. There's various script and programs out there for managing Let's > Encrypt certificates (certbot, acme.sh, dehydrated, etc). There's a bunch > of different bits available in the ports tree. > > We use dehydrated at work, using DNS for authenticating the cert requests, > and have it full automated via cron, managing certs for 50-odd domains > (school servers and firewalls). Works great. > Forgot the link: https://letsencrypt.org -- Freddie Cash fjwcash@gmail.comhelp
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAOjFWZ7GMy5X-RNLLBNwJ%2BeBuoXxYnQ1T-qo5KYigYoKzEuP_Q>