Skip to main content
Webmasters

Return to Answer

Commonmark migration
Source Link
Community Bot
Community Bot
  • 1

#Not everything can use automated renewal

Not everything can use automated renewal

CertBot makes it easy to use for websites... but what if you're using certificates for other things?

We have an LDAP server that our website authenticates with. It runs over a secure port, but it needs a signed certificate to run. I could go with a free wildcard certificate... but that means converting the certificate to PKCS12 every 3 months (web servers use PEM) and then importing the new certificate. Oh, and our network firewall uses PKCS12, too. That's a lot of hassle for free.

#Not everything can use automated renewal

CertBot makes it easy to use for websites... but what if you're using certificates for other things?

We have an LDAP server that our website authenticates with. It runs over a secure port, but it needs a signed certificate to run. I could go with a free wildcard certificate... but that means converting the certificate to PKCS12 every 3 months (web servers use PEM) and then importing the new certificate. Oh, and our network firewall uses PKCS12, too. That's a lot of hassle for free.

Not everything can use automated renewal

CertBot makes it easy to use for websites... but what if you're using certificates for other things?

We have an LDAP server that our website authenticates with. It runs over a secure port, but it needs a signed certificate to run. I could go with a free wildcard certificate... but that means converting the certificate to PKCS12 every 3 months (web servers use PEM) and then importing the new certificate. Oh, and our network firewall uses PKCS12, too. That's a lot of hassle for free.

Source Link
Machavity
Machavity
  • 203
  • 2
  • 12

#Not everything can use automated renewal

CertBot makes it easy to use for websites... but what if you're using certificates for other things?

We have an LDAP server that our website authenticates with. It runs over a secure port, but it needs a signed certificate to run. I could go with a free wildcard certificate... but that means converting the certificate to PKCS12 every 3 months (web servers use PEM) and then importing the new certificate. Oh, and our network firewall uses PKCS12, too. That's a lot of hassle for free.