#zerossl — Public Fediverse posts

🎯 #Caddy on the VPS handles HTTPS with on-demand TLS. Certificates are auto-provisioned per subdomain, with a #ZeroSSL fallback when Let's Encrypt hits its 50-certs-per-week rate limit.

🔧 A small #Python service on the server reconfigures Caddy routes dynamically as tunnels connect and disconnect.

🎯 #Caddy on the VPS handles HTTPS with on-demand TLS. Certificates are auto-provisioned per subdomain, with a #ZeroSSL fallback when Let's Encrypt hits its 50-certs-per-week rate limit.

🔧 A small #Python service on the server reconfigures Caddy routes dynamically as tunnels connect and disconnect.

🎯 #Caddy on the VPS handles HTTPS with on-demand TLS. Certificates are auto-provisioned per subdomain, with a #ZeroSSL fallback when Let's Encrypt hits its 50-certs-per-week rate limit.

🔧 A small #Python service on the server reconfigures Caddy routes dynamically as tunnels connect and disconnect.

🎯 #Caddy on the VPS handles HTTPS with on-demand TLS. Certificates are auto-provisioned per subdomain, with a #ZeroSSL fallback when Let's Encrypt hits its 50-certs-per-week rate limit.

🔧 A small #Python service on the server reconfigures Caddy routes dynamically as tunnels connect and disconnect.

🎯 #Caddy on the VPS handles HTTPS with on-demand TLS. Certificates are auto-provisioned per subdomain, with a #ZeroSSL fallback when Let's Encrypt hits its 50-certs-per-week rate limit.

🔧 A small #Python service on the server reconfigures Caddy routes dynamically as tunnels connect and disconnect.

#ZeroSSL certificate renewal is slow. Several minutes per domain, but it goes through successfully. Normally this runs unattended and I don't pay attention. So maybe that's normal.🤷‍♂️
#TLS #SSL #homelab #selfhosting

DNS-PERSIST-01 ACME validation - Uh oh, constant annoyance, clients are moving so slowly. I would really love to have this with ZeroSSL. It seems that one of the best ways would be using lego with win-acme’s scripts for Windows environment.

Deep breath. Yeah, it’s doable, slightly annoying. Adding extra custom tech which I would want to avoid in the very first place. But for the systems that NEED it, it still would be better option than NOT having it at all. Maybe when I’m not too busy, I’ll sort it out. It’s doable for sure, if the motivation and need just is there. - Yes, ZeroSSL is also lacking the DNS-PERSIST-01 support, so, double bummer, but life is.

#TLS #ZeroSSL #LetsEncrypt #winacme #ACME #Lego

DNS-PERSIST-01 ACME validation - Uh oh, constant annoyance, clients are moving so slowly. I would really love to have this with ZeroSSL. It seems that one of the best ways would be using lego with win-acme’s scripts for Windows environment.

Deep breath. Yeah, it’s doable, slightly annoying. Adding extra custom tech which I would want to avoid in the very first place. But for the systems that NEED it, it still would be better option than NOT having it at all. Maybe when I’m not too busy, I’ll sort it out. It’s doable for sure, if the motivation and need just is there. - Yes, ZeroSSL is also lacking the DNS-PERSIST-01 support, so, double bummer, but life is.

#TLS #ZeroSSL #LetsEncrypt #winacme #ACME #Lego

DNS-PERSIST-01 ACME validation - Uh oh, constant annoyance, clients are moving so slowly. I would really love to have this with ZeroSSL. It seems that one of the best ways would be using lego with win-acme’s scripts for Windows environment.

Deep breath. Yeah, it’s doable, slightly annoying. Adding extra custom tech which I would want to avoid in the very first place. But for the systems that NEED it, it still would be better option than NOT having it at all. Maybe when I’m not too busy, I’ll sort it out. It’s doable for sure, if the motivation and need just is there. - Yes, ZeroSSL is also lacking the DNS-PERSIST-01 support, so, double bummer, but life is.

#TLS #ZeroSSL #LetsEncrypt #winacme #ACME #Lego

DNS-PERSIST-01 ACME validation - Uh oh, constant annoyance, clients are moving so slowly. I would really love to have this with ZeroSSL. It seems that one of the best ways would be using lego with win-acme’s scripts for Windows environment.

Deep breath. Yeah, it’s doable, slightly annoying. Adding extra custom tech which I would want to avoid in the very first place. But for the systems that NEED it, it still would be better option than NOT having it at all. Maybe when I’m not too busy, I’ll sort it out. It’s doable for sure, if the motivation and need just is there. - Yes, ZeroSSL is also lacking the DNS-PERSIST-01 support, so, double bummer, but life is.

#TLS #ZeroSSL #LetsEncrypt #winacme #ACME #Lego

DNS-PERSIST-01 ACME validation - Uh oh, constant annoyance, clients are moving so slowly. I would really love to have this with ZeroSSL. It seems that one of the best ways would be using lego with win-acme’s scripts for Windows environment.

Deep breath. Yeah, it’s doable, slightly annoying. Adding extra custom tech which I would want to avoid in the very first place. But for the systems that NEED it, it still would be better option than NOT having it at all. Maybe when I’m not too busy, I’ll sort it out. It’s doable for sure, if the motivation and need just is there. - Yes, ZeroSSL is also lacking the DNS-PERSIST-01 support, so, double bummer, but life is.

#TLS #ZeroSSL #LetsEncrypt #winacme #ACME #Lego

Let's Encrypt больше не вариант? Обзор альтернатив

4 июня 2026 года Let's Encrypt тихо обновил пользовательское соглашение до версии 1.7. Новый пункт обязывает получателя сертификата подтвердить, что он не находится под полными санкциями США. В России это вызвало волну обсуждений — и не без причины. В Беларуси пока тихо. Но тихо — не значит «нас это не касается».

https://habr.com/ru/articles/1046618/

#SSL #HTTPS #сертификаты #ACME #certbot #санкции #ZeroSSL #PKI #Беларусь #letsencrypt

Let's Encrypt больше не вариант? Обзор альтернатив

4 июня 2026 года Let's Encrypt тихо обновил пользовательское соглашение до версии 1.7. Новый пункт обязывает получателя сертификата подтвердить, что он не находится под полными санкциями США. В России это вызвало волну обсуждений — и не без причины. В Беларуси пока тихо. Но тихо — не значит «нас это не касается».

https://habr.com/ru/articles/1046618/

#SSL #HTTPS #сертификаты #ACME #certbot #санкции #ZeroSSL #PKI #Беларусь #letsencrypt

Let's Encrypt больше не вариант? Обзор альтернатив

4 июня 2026 года Let's Encrypt тихо обновил пользовательское соглашение до версии 1.7. Новый пункт обязывает получателя сертификата подтвердить, что он не находится под полными санкциями США. В России это вызвало волну обсуждений — и не без причины. В Беларуси пока тихо. Но тихо — не значит «нас это не касается».

https://habr.com/ru/articles/1046618/

#SSL #HTTPS #сертификаты #ACME #certbot #санкции #ZeroSSL #PKI #Беларусь #letsencrypt

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL - Please add IPv6 support and a DNS-PERSIST-01 validation method. #ZeroSSL #IPv6 #SSL #TLS #certificates #networking

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks #ZeroSSL #LetsEncrypt #Certificates

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks

#ZeroSSL #EuropeanAlternatives #TLS #Validation #Certificates #LetsEncrypt

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks

#ZeroSSL #EuropeanAlternatives #TLS #Validation #Certificates #LetsEncrypt

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks

#ZeroSSL #EuropeanAlternatives #TLS #Validation #Certificates #LetsEncrypt

ZeroSSL a kind request, supporting DNS-PERSIST-01 validation method would be just awesome! - Thanks

#ZeroSSL #EuropeanAlternatives #TLS #Validation #Certificates #LetsEncrypt

Oh joy. Nothing like an early Sunday morning surprise: your website is down, and you realize you forgot about your Buypass certificate’s expiry date. Anyway, a quick ACME client reconfiguration and I’ve switched over to another European provider, ZeroSSL. Problem solved. #SysAdminLife #WebsiteDown #TLS #HTTPS #ACME #Buypass #ZeroSSL #Developer #Fail #SundayMorning

Oh joy. Nothing like an early Sunday morning surprise: your website is down, and you realize you forgot about your Buypass certificate’s expiry date. Anyway, a quick ACME client reconfiguration and I’ve switched over to another European provider, ZeroSSL. Problem solved. #SysAdminLife #WebsiteDown #TLS #HTTPS #ACME #Buypass #ZeroSSL #Developer #Fail #SundayMorning

Oh joy. Nothing like an early Sunday morning surprise: your website is down, and you realize you forgot about your Buypass certificate’s expiry date. Anyway, a quick ACME client reconfiguration and I’ve switched over to another European provider, ZeroSSL. Problem solved. #SysAdminLife #WebsiteDown #TLS #HTTPS #ACME #Buypass #ZeroSSL #Developer #Fail #SundayMorning

Oh joy. Nothing like an early Sunday morning surprise: your website is down, and you realize you forgot about your Buypass certificate’s expiry date. Anyway, a quick ACME client reconfiguration and I’ve switched over to another European provider, ZeroSSL. Problem solved. #SysAdminLife #WebsiteDown #TLS #HTTPS #ACME #Buypass #ZeroSSL #Developer #Fail #SundayMorning

Anyone know a European alternative to LetsEncrypt?

And I mean: get a free (or very reasonably priced) certificate for a private web site with one or two sub-domains?

#letsencrypt #zerossl #europe #eu #web #hosting

Anyone know a European alternative to LetsEncrypt?

And I mean: get a free (or very reasonably priced) certificate for a private web site with one or two sub-domains?

#letsencrypt #zerossl #europe #eu #web #hosting

Anyone know a European alternative to LetsEncrypt?

And I mean: get a free (or very reasonably priced) certificate for a private web site with one or two sub-domains?

#letsencrypt #zerossl #europe #eu #web #hosting

Anyone know a European alternative to LetsEncrypt?

And I mean: get a free (or very reasonably priced) certificate for a private web site with one or two sub-domains?

#letsencrypt #zerossl #europe #eu #web #hosting

Anyone know a European alternative to LetsEncrypt?

And I mean: get a free (or very reasonably priced) certificate for a private web site with one or two sub-domains?

#letsencrypt #zerossl #europe #eu #web #hosting

One Open-source Project Daily

A pure Unix shell script implementing ACME client protocol

https://github.com/acmesh-official/acme.sh

#1ospd #opensource #acme #acmeclient #acmeprotocol #ash #bash #buypass #certbot #letsencrypt #posix #posixsh #shell #zerossl

One Open-source Project Daily

A pure Unix shell script implementing ACME client protocol

https://github.com/acmesh-official/acme.sh

#1ospd #opensource #acme #acmeclient #acmeprotocol #ash #bash #buypass #certbot #letsencrypt #posix #posixsh #shell #zerossl

One Open-source Project Daily

A pure Unix shell script implementing ACME client protocol

https://github.com/acmesh-official/acme.sh

#1ospd #opensource #acme #acmeclient #acmeprotocol #ash #bash #buypass #certbot #letsencrypt #posix #posixsh #shell #zerossl

One Open-source Project Daily

A pure Unix shell script implementing ACME client protocol

https://github.com/acmesh-official/acme.sh

#1ospd #opensource #acme #acmeclient #acmeprotocol #ash #bash #buypass #certbot #letsencrypt #posix #posixsh #shell #zerossl

One Open-source Project Daily

A pure Unix shell script implementing ACME client protocol

https://github.com/acmesh-official/acme.sh

#1ospd #opensource #acme #acmeclient #acmeprotocol #ash #bash #buypass #certbot #letsencrypt #posix #posixsh #shell #zerossl

@mirabilos
I use #zerossl for my web and mail servers.

https://zerossl.com/

I no longer use certbot but acme.sh to generate certificates.

ZeroSSL is the default CA for https://acme.sh/

edit: I fall back to letsencrypt when I need a wildcard cert such as *.domain.tld

@mirabilos
I use #zerossl for my web and mail servers.

https://zerossl.com/

I no longer use certbot but acme.sh to generate certificates.

ZeroSSL is the default CA for https://acme.sh/

edit: I fall back to letsencrypt when I need a wildcard cert such as *.domain.tld

@mirabilos
I use #zerossl for my web and mail servers.

https://zerossl.com/

I no longer use certbot but acme.sh to generate certificates.

ZeroSSL is the default CA for https://acme.sh/

edit: I fall back to letsencrypt when I need a wildcard cert such as *.domain.tld

@mirabilos
I use #zerossl for my web and mail servers.

https://zerossl.com/

I no longer use certbot but acme.sh to generate certificates.

ZeroSSL is the default CA for https://acme.sh/

edit: I fall back to letsencrypt when I need a wildcard cert such as *.domain.tld

@mirabilos
I use #zerossl for my web and mail servers.

https://zerossl.com/

I no longer use certbot but acme.sh to generate certificates.

ZeroSSL is the default CA for https://acme.sh/

edit: I fall back to letsencrypt when I need a wildcard cert such as *.domain.tld

I recently started to replace #nginx with @caddy and it's as satisfying as it is scary to replace a complex config that spans five included files and a total of about 400 lines with a single Caddyfile of around 80 lines.

And on top of that #Caddy also made certbot redundant as it takes care of fetching and renewing the tls certs from #LetsEncrypt and keeps a #ZeroSSL backup for all of my domains.

I think I'm in love..

I recently started to replace #nginx with @caddy and it's as satisfying as it is scary to replace a complex config that spans five included files and a total of about 400 lines with a single Caddyfile of around 80 lines.

And on top of that #Caddy also made certbot redundant as it takes care of fetching and renewing the tls certs from #LetsEncrypt and keeps a #ZeroSSL backup for all of my domains.

I think I'm in love..

I recently started to replace #nginx with @caddy and it's as satisfying as it is scary to replace a complex config that spans five included files and a total of about 400 lines with a single Caddyfile of around 80 lines.

And on top of that #Caddy also made certbot redundant as it takes care of fetching and renewing the tls certs from #LetsEncrypt and keeps a #ZeroSSL backup for all of my domains.

I think I'm in love..

I recently started to replace #nginx with @caddy and it's as satisfying as it is scary to replace a complex config that spans five included files and a total of about 400 lines with a single Caddyfile of around 80 lines.

And on top of that #Caddy also made certbot redundant as it takes care of fetching and renewing the tls certs from #LetsEncrypt and keeps a #ZeroSSL backup for all of my domains.

I think I'm in love..

I recently started to replace #nginx with @caddy and it's as satisfying as it is scary to replace a complex config that spans five included files and a total of about 400 lines with a single Caddyfile of around 80 lines.

And on top of that #Caddy also made certbot redundant as it takes care of fetching and renewing the tls certs from #LetsEncrypt and keeps a #ZeroSSL backup for all of my domains.

I think I'm in love..

Switching my Caddy server to use ZeroSSL for AMCE SSL certification, replacing LetsEncrypt, was as easy as adding this to my Caddyfile:

{
    acme_ca https://acme.zerossl.com/v2/DV90
}

#CaddyServer #Caddy #SSL #ACME #LetsEncypt #ZeroSSL

Switching my Caddy server to use ZeroSSL for AMCE SSL certification, replacing LetsEncrypt, was as easy as adding this to my Caddyfile:

{
    acme_ca https://acme.zerossl.com/v2/DV90
}

#CaddyServer #Caddy #SSL #ACME #LetsEncypt #ZeroSSL

Switching my Caddy server to use ZeroSSL for AMCE SSL certification, replacing LetsEncrypt, was as easy as adding this to my Caddyfile:

{
    acme_ca https://acme.zerossl.com/v2/DV90
}

#CaddyServer #Caddy #SSL #ACME #LetsEncypt #ZeroSSL

Switching my Caddy server to use ZeroSSL for AMCE SSL certification, replacing LetsEncrypt, was as easy as adding this to my Caddyfile:

{
    acme_ca https://acme.zerossl.com/v2/DV90
}

#CaddyServer #Caddy #SSL #ACME #LetsEncypt #ZeroSSL

@jpmens what are other #ACME providers except of @letsencrypt and where are they located?

@european_alternatives lists only one (#BuypassGoSSL) so far:
https://european-alternatives.eu/category/acme-ssl-certificate-providers

#ZeroSSL itself seems to be Austria-based, but is a subsidiary of HID Global (Texas, US) which again is a subsidiary of ASSA Abloy (Sweden), so it being independent from US-shenanigans is not quite clear.

We should probably start shipping a "ca-certififcates-eu" package in distributions...

@jpmens what are other #ACME providers except of @letsencrypt and where are they located?

@european_alternatives lists only one (#BuypassGoSSL) so far:
https://european-alternatives.eu/category/acme-ssl-certificate-providers

#ZeroSSL itself seems to be Austria-based, but is a subsidiary of HID Global (Texas, US) which again is a subsidiary of ASSA Abloy (Sweden), so it being independent from US-shenanigans is not quite clear.

We should probably start shipping a "ca-certififcates-eu" package in distributions...

@jpmens what are other #ACME providers except of @letsencrypt and where are they located?

@european_alternatives lists only one (#BuypassGoSSL) so far:
https://european-alternatives.eu/category/acme-ssl-certificate-providers

#ZeroSSL itself seems to be Austria-based, but is a subsidiary of HID Global (Texas, US) which again is a subsidiary of ASSA Abloy (Sweden), so it being independent from US-shenanigans is not quite clear.

We should probably start shipping a "ca-certififcates-eu" package in distributions...

@jpmens what are other #ACME providers except of @letsencrypt and where are they located?

@european_alternatives lists only one (#BuypassGoSSL) so far:
https://european-alternatives.eu/category/acme-ssl-certificate-providers

#ZeroSSL itself seems to be Austria-based, but is a subsidiary of HID Global (Texas, US) which again is a subsidiary of ASSA Abloy (Sweden), so it being independent from US-shenanigans is not quite clear.

We should probably start shipping a "ca-certififcates-eu" package in distributions...