Support for Lets Encrypt

Discussion in 'Questions about Everleap' started by jzahoor, Oct 30, 2018.

  1. Any plans on supporting the fast-growing and free SSL cert issuer Let's Encrypt?

    They are now trusted by all major root programs and also offer free wildcard certs. Azure supports them too.

    We are currently evaluating Everleap and Azure and hoping Everleap does/will support Let's Encrypt.
     
  2. Martin Ortega

    Martin Ortega Everleap staff

    We do support Let's Encrypt SSL Certificates in our hosting environment.
     
  3. That's awesome! Is there a kb article you can point me to so we can install it to try it out? Thanks in advance!
     
  4. Martin Ortega

    Martin Ortega Everleap staff

    We don't have instructions but most of our customers that do use Let's Encrypt usually do it locally and import the pfx file into our control panel. Within our control panel SSL section you can import the pfx file that contains the public and private key. Then you can bind your site to the SSL Certificate.

    The easiest way I found was getting it from https://www.sslforfree.com/ and using the Manual Verification method that requires you to upload the files they ask you to upload to verify domain name ownership. You then need to add the following rule within your web.config file so our server and server the two files SSL For Free provides to you. Otherwise you will get a MIME type error.

    The rule is below:

    Code:
    <?xml version="1.0" encoding="UTF-8"?>
     <configuration>
         <system.webServer>
             <staticContent>
                 <mimeMap fileExtension="." mimeType="text/xml" />
             </staticContent>
         </system.webServer>
     </configuration>
    Make sure you add that rule into your web.config file before uploading the files.

    Once confirmed they will give you the ability to download the .key file and .crt file. You need those two files to create the pfx file using openSSL locally on your computer.

    Once you have the pfx file go ahead and import it into the control panel and bind the SSL Certificate to the domain name.
     
  5. Would it be possible to implement this tool on your servers? https://github.com/PKISharp/win-acme

     
  6. Martin Ortega

    Martin Ortega Everleap staff

    No, we don't have plans to install anything on our servers at the moment.
     
  7. Is it possible to automate the cert update remotely for us at out Everleap hosted server? So the cert-renewal could be done in a cron job, from home, and then automatically installed onto our Everleap server. Is there an management API for this in Everleap? Thanks!
     
    Robert Brocato likes this.
  8. Over the web you will find many certificate providers who offer SSL Certificates for Free.

    Without SSL certificate your website visitors will face problems when they enter into your website.

    SSL certificates can be expensive but they are necessary too. You have several options to get Free SSL Certificates for your website.

    The following are the options available to you if you want to try Free SSL Certificates:

    https://www.freesslcertificate.org/ - Offers Premium SSL Certificates for Free from trusted SSL Certificate providers.

    Lets Encrypt: An open automated certificate authority with easy to install process but it has some of the cons that you will not like.
     
  9. Takeshi

    Takeshi Everleap staff

    You can supply your own SSL cert so you can use letsencrypt or any other cert.
     

Share This Page