Bristol Digest, Vol 653, Issue 4

Send Bristol mailing list submissions to
bristol@mailman.lug.org.uk

To subscribe or unsubscribe via the World Wide Web, visit
https://mailman.lug.org.uk/mailman/listinfo/bristol
or, via email, send a message with subject or body 'help' to
bristol-request@mailman.lug.org.uk

You can reach the person managing the list at
bristol-owner@mailman.lug.org.uk

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Bristol digest..."

Today's Topics:

1. Re: SSL Certs (Philip Hudson)
2. Re: SSL Certs (cms)
3. Re: SSL Certs (Steve King)
4. Re: SSL Certs (Martin Moore)
5. Re: SSL Certs (Amias Channer)

----------------------------------------------------------------------

Message: 1
Date: Wed, 20 Jul 2016 11:14:09 +0100
From: Philip Hudson <phil.hudson@iname.com>
To: Martin Moore <martinm@it-helps.co.uk>, Bristol and Bath Linux
User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] SSL Certs
Message-ID:
<CAJ1MqVE3+rtGwHqQ0CmrD7BuPHF7jbHJWjYWyhqrdTnYgUjjvw@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

On 20 July 2016 at 10:56, Martin Moore via Bristol
<bristol@mailman.lug.org.uk> wrote:
> I need to go SSL, with subdomains and multiple servers on the same domain. The individual servers don't need to 'share' the certs but it would be nice.
>
> To make sure I get the right stuff, what do I need, anything to watch out for and where's a good supplier?

https://letsencrypt.org/

--
Phil Hudson http://hudson-it.ddns.net
@UWascalWabbit PGP/GnuPG ID: 0x887DCA63

------------------------------

Message: 2
Date: Wed, 20 Jul 2016 11:20:12 +0100
From: cms <cms@beatworm.co.uk>
To: bristol@mailman.lug.org.uk
Subject: Re: [bristol] SSL Certs
Message-ID: <6de3cdc2-ad8d-0dd7-c432-391a851411e7@beatworm.co.uk>
Content-Type: text/plain; charset=utf-8; format=flowed

On 20/07/16 11:14, Philip Hudson via Bristol wrote:
> On 20 July 2016 at 10:56, Martin Moore via Bristol
> <bristol@mailman.lug.org.uk> wrote:
>> I need to go SSL, with subdomains and multiple servers on the same domain. The individual servers don't need to 'share' the certs but it would be nice.
>>
>> To make sure I get the right stuff, what do I need, anything to watch out for and where's a good supplier?
> https://letsencrypt.org/
>
>
I don't think letsencrypt supports wildcards, which I think may have
been what was meant by 'share' and subdomains. LE is a bit of a pain
with subdomains, if you're trying to do a lot of them

--
Regards,
cms

------------------------------

Message: 3
Date: Wed, 20 Jul 2016 11:35:42 +0100
From: "Steve King" <debian@invux.com>
To: "Martin Moore" <martinm@it-helps.co.uk>, "Bristol and Bath Linux
User Group" <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] SSL Certs
Message-ID:
<d7488b6d8ff5db1ea1423dfd5c891609.squirrel@dazzle.invux.com>
Content-Type: text/plain;charset=iso-8859-1

> I need to go SSL, with subdomains and multiple servers on the same
> domain.  The individual servers don’t need to ‘share’ the certs but
> it would be nice.
>  
> To make sure I get the right stuff, what do I need, anything to watch out
> for and where’s a good supplier?
>  
>  
> Cheers.
>  
> Martin.
>  
>  
>

First thing to ask, do you need a supplier? Or could you do your own
certificate authority and ensure that the CA certificate is installed on
all the clients?

Lets encrypt - doesn't do wild cards, and the certs are only valid for 90
days.

--
Steve

------------------------------

Message: 4
Date: Wed, 20 Jul 2016 11:41:05 +0100
From: Martin Moore <martinm@it-helps.co.uk>
To: Bristol and Bath Linux User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] SSL Certs
Message-ID: <6C832FDD-B26A-44AF-9DCC-F1D62F343C11@it-helps.co.uk>
Content-Type: text/plain; charset="UTF-8"

No – by share I mean same cert on multiple servers to save money.

I've installed letsencrpyt on one server – very simple and lists subdomains to select/deselect as opposed to full wildcard.

I'll stick with them for the moment .

Cheers,

Martin.

On 20/07/2016, 11:20, "Bristol on behalf of cms via Bristol" <bristol-bounces@mailman.lug.org.uk on behalf of bristol@mailman.lug.org.uk> wrote:

On 20/07/16 11:14, Philip Hudson via Bristol wrote:
> On 20 July 2016 at 10:56, Martin Moore via Bristol
> <bristol@mailman.lug.org.uk> wrote:
>> I need to go SSL, with subdomains and multiple servers on the same domain. The individual servers don't need to 'share' the certs but it would be nice.
>>
>> To make sure I get the right stuff, what do I need, anything to watch out for and where's a good supplier?
> https://letsencrypt.org/
>
>
I don't think letsencrypt supports wildcards, which I think may have
been what was meant by 'share' and subdomains. LE is a bit of a pain
with subdomains, if you're trying to do a lot of them

--
Regards,
cms

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

Message: 5
Date: Wed, 20 Jul 2016 12:38:41 +0100
From: Amias Channer <me@amias.net>
To: Martin Moore <martinm@it-helps.co.uk>, Bristol and Bath Linux
User Group <bristol@mailman.lug.org.uk>
Subject: Re: [bristol] SSL Certs
Message-ID:
<CAMgU7XVwwC2a864_6qpD0wQ=j1n+6aKYSMaOUz_V1Bg08mKzgQ@mail.gmail.com>
Content-Type: text/plain; charset=UTF-8

Hello Martin,

Letsencrypt is a good choice , they are apparently about to expand
their services shortly and its easy to automate with them so you can
make your own auto renewer and setup tool.

Cheers
Amias

On 20 July 2016 at 11:41, Martin Moore via Bristol
<bristol@mailman.lug.org.uk> wrote:
> No – by share I mean same cert on multiple servers to save money.
>
> I've installed letsencrpyt on one server – very simple and lists subdomains to select/deselect as opposed to full wildcard.
>
> I'll stick with them for the moment .
>
> Cheers,
>
> Martin.
>
>
>
> On 20/07/2016, 11:20, "Bristol on behalf of cms via Bristol" <bristol-bounces@mailman.lug.org.uk on behalf of bristol@mailman.lug.org.uk> wrote:
>
>
> On 20/07/16 11:14, Philip Hudson via Bristol wrote:
>> On 20 July 2016 at 10:56, Martin Moore via Bristol
>> <bristol@mailman.lug.org.uk> wrote:
>>> I need to go SSL, with subdomains and multiple servers on the same domain. The individual servers don't need to 'share' the certs but it would be nice.
>>>
>>> To make sure I get the right stuff, what do I need, anything to watch out for and where's a good supplier?
>> https://letsencrypt.org/
>>
>>
> I don't think letsencrypt supports wildcards, which I think may have
> been what was meant by 'share' and subdomains. LE is a bit of a pain
> with subdomains, if you're trying to do a lot of them
>
> --
> Regards,
> cms
>
>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol
>
>
>
> _______________________________________________
> Bristol mailing list
> Bristol@mailman.lug.org.uk
> https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

Subject: Digest Footer

_______________________________________________
Bristol mailing list
Bristol@mailman.lug.org.uk
https://mailman.lug.org.uk/mailman/listinfo/bristol

------------------------------

End of Bristol Digest, Vol 653, Issue 4
***************************************