Support for Lets Encrypt

Discussion in 'Questions about Everleap' started by jzahoor, Oct 30, 2018.

  1. Any plans on supporting the fast-growing and free SSL cert issuer Let's Encrypt?

    They are now trusted by all major root programs and also offer free wildcard certs. Azure supports them too.

    We are currently evaluating Everleap and Azure and hoping Everleap does/will support Let's Encrypt.
     
  2. Martin Ortega

    Martin Ortega Everleap staff

    We do support Let's Encrypt SSL Certificates in our hosting environment.
     
  3. That's awesome! Is there a kb article you can point me to so we can install it to try it out? Thanks in advance!
     
  4. Martin Ortega

    Martin Ortega Everleap staff

    We don't have instructions but most of our customers that do use Let's Encrypt usually do it locally and import the pfx file into our control panel. Within our control panel SSL section you can import the pfx file that contains the public and private key. Then you can bind your site to the SSL Certificate.

    The easiest way I found was getting it from https://www.sslforfree.com/ and using the Manual Verification method that requires you to upload the files they ask you to upload to verify domain name ownership. You then need to add the following rule within your web.config file so our server and server the two files SSL For Free provides to you. Otherwise you will get a MIME type error.

    The rule is below:

    Code:
    <?xml version="1.0" encoding="UTF-8"?>
     <configuration>
         <system.webServer>
             <staticContent>
                 <mimeMap fileExtension="." mimeType="text/xml" />
             </staticContent>
         </system.webServer>
     </configuration>
    Make sure you add that rule into your web.config file before uploading the files.

    Once confirmed they will give you the ability to download the .key file and .crt file. You need those two files to create the pfx file using openSSL locally on your computer.

    Once you have the pfx file go ahead and import it into the control panel and bind the SSL Certificate to the domain name.
     
  5. Would it be possible to implement this tool on your servers? https://github.com/PKISharp/win-acme

     

Share This Page