<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Is there an aeutorenewal script in place?<div class=""><br class=""></div><div class="">David</div><div class=""><br class=""><div class=""><div><blockquote type="cite" class=""><div class="">On 3 Aug 2017, at 10:52 pm, Michael Oghia <<a href="mailto:mike.oghia@gmail.com" class="">mike.oghia@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><div class=""><div dir="ltr" class="">Excellent work Tapani, thanks! It's working fine for me.<div class="gmail_extra"><div class=""><div class="m_3956312984592572335m_5421794479016187318gmail_signature" data-smartmail="gmail_signature"><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div class=""><br class=""></div><div class=""><font size="2" face="arial, helvetica, sans-serif" class="">-Michael<br class=""></font></div><div dir="ltr" class=""><div class=""><div dir="ltr" class=""><div dir="ltr" class=""></div></div></div>
</div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
<br class=""><div class="gmail_quote">On Thu, Aug 3, 2017 at 3:22 PM, Tapani Tarvainen <span dir="ltr" class=""><<a href="mailto:ncuc@tapani.tarvainen.info" target="_blank" class="">ncuc@tapani.tarvainen.info</a>></span> wrote:<br class=""><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">OK, SSL implemented using <a href="http://letsencrypt.org/" rel="noreferrer" target="_blank" class="">letsencrypt.org</a>.<br class="">
<br class="">
I set it up with three separate certificates:<br class="">
<br class="">
<a href="http://ncuc.org/" rel="noreferrer" target="_blank" class="">ncuc.org</a> + <a href="http://www.ncuc.org/" rel="noreferrer" target="_blank" class="">www.ncuc.org</a><br class="">
<a href="http://lists.ncuc.org/" rel="noreferrer" target="_blank" class="">lists.ncuc.org</a><br class="">
<a href="http://oldwww.ncuc.org/" rel="noreferrer" target="_blank" class="">oldwww.ncuc.org</a><br class="">
<br class="">
as those might be split to different machines at some point.<br class="">
<br class="">
Please report ASAP if you encounter any problems.<br class="">
<br class="">
Tapani<br class="">
<br class="">
On Tue, Aug 01, 2017 at 05:24:22PM -0500, Renata Aquino Ribeiro (<a href="mailto:raquino@gmail.com" target="_blank" class="">raquino@gmail.com</a>) wrote:<br class="">
><br class="">
> Letsencrypt I only hear good things<br class="">
><br class="">
> Em 01/08/2017 16:01, "David Cake" <<a href="mailto:davecake@gmail.com" target="_blank" class="">davecake@gmail.com</a>> escreveu:<br class="">
><br class="">
> Yeah, lets encrypt can just be scripted for the cert to be renewed<br class="">
> automatically, requires no host or reg support.<br class="">
><br class="">
> We’ve got no need for any higher form of cert (like an EV) and lets encrypt<br class="">
> is free, and low maintenance, so I am in favour of it.<br class="">
><br class="">
> David<br class="">
><br class="">
><br class="">
> On 1 Aug 2017, at 9:30 pm, Tapani Tarvainen <<a href="mailto:ncuc@tapani.tarvainen.info" target="_blank" class="">ncuc@tapani.tarvainen.info</a>><br class="">
> wrote:<br class="">
><br class="">
> Hi Brenden,<br class="">
><br class="">
> Like just about all registrars and their resellers, Gandi offers<br class="">
> certificates of various kinds, but they cost money (admittedly little)<br class="">
> and perhaps more important, require manual intervention to renew.<br class="">
><br class="">
> Mainly for the latter reason I would suggest at least starting with<br class="">
> <a href="http://letsencrypt.org/" rel="noreferrer" target="_blank" class="">letsencrypt.org</a>. Its automatic update system works quite well nowadays<br class="">
> and does not require any special support from Gandi - it's basically<br class="">
> just a program that needs to be installed, once, and set up to run<br class="">
> automatically to renew the certificate as needed.<br class="">
><br class="">
> If you want to set it up, I'll be happy to help.<br class="">
><br class="">
> Tapani<br class="">
><br class="">
> On Tue, Aug 01, 2017 at 08:06:58AM -0400, Brenden Kuerbis (<br class="">
> <a href="mailto:bkuerbis@internetgovernance.org" target="_blank" class="">bkuerbis@internetgovernance.or<wbr class="">g</a>) wrote:<br class="">
><br class="">
><br class="">
> I wouldn't mind learning how to implement/manage a Let'sEncrypt cert.<br class="">
><br class="">
> But we really should consider the ongoing maintenance (namely who is<br class="">
> doing it). Does Gandi support keeping a LetEncrypt cert updated<br class="">
> automatically?<br class="">
><br class="">
> If not, maybe Gandi offers a cert service we should consider?<br class="">
> ------------------------------<wbr class="">---------<br class="">
> Brenden Kuerbis<br class="">
> Internet Governance Project<br class="">
> <a href="http://internetgovernance.org/" rel="noreferrer" target="_blank" class="">http://internetgovernance.org</a><br class="">
><br class="">
><br class="">
> On Tue, Aug 1, 2017 at 3:14 AM, Tapani Tarvainen<br class="">
> <<a href="mailto:ncuc@tapani.tarvainen.info" target="_blank" class="">ncuc@tapani.tarvainen.info</a>> wrote:<br class="">
><br class="">
> Dear all,<br class="">
><br class="">
> It was brought to my attention that <a href="http://ncuc.org/" rel="noreferrer" target="_blank" class="">ncuc.org</a> does not use SSL.<br class="">
><br class="">
> There is no really good reason for that. It was one of the things<br class="">
> in my to-do list when I left NCUC EC rather suddenly in 2013,<br class="">
> and nobody picked the task up.<br class="">
><br class="">
> Back then it would've cost money, too, but now it could be done<br class="">
> for free using <a href="http://letsencrypt.org/" rel="noreferrer" target="_blank" class="">letsencrypt.org</a>.<br class="">
><br class="">
> So I'd propose we do just that.<br class="">
><br class="">
> I can do it, it's easy enough, but I'm of course also happy to let<br class="">
> someone else do it (I can assist if someone wants to do it in order<br class="">
> to learn, too).<br class="">
><br class="">
> --<br class="">
> Tapani Tarvainen<br class="">
______________________________<wbr class="">_________________<br class="">
E-team mailing list<br class="">
<a href="mailto:E-team@lists.ncuc.org" target="_blank" class="">E-team@lists.ncuc.org</a><br class="">
<a href="http://lists.ncuc.org/cgi-bin/mailman/listinfo/e-team" rel="noreferrer" target="_blank" class="">http://lists.ncuc.org/cgi-bin/<wbr class="">mailman/listinfo/e-team</a><br class="">
</blockquote></div><br class=""></div></div>
_______________________________________________<br class="">E-team mailing list<br class=""><a href="mailto:E-team@lists.ncuc.org" class="">E-team@lists.ncuc.org</a><br class="">http://lists.ncuc.org/cgi-bin/mailman/listinfo/e-team<br class=""></div></blockquote></div><br class=""></div></div></body></html>