diafygi/acme-tiny on Hacker News

…that will break? How can I tell if I'm using OCSP or CRL? Totally incomprehensible blog post. [1] https://github.com/diafygi/acme-tiny

comment by eduction · 2024-07-23 · in Intent to end OCSP service

Even with Python things can be written small (200 LoC) it seems: * https://github.com/diafygi/acme-tiny/blob/master/acme_tiny.p... * https://github.com/diafygi/acme-tiny * https://packages.debian.org/stable/acme-tiny

comment by throw0101c · 2023-03-12 · in Write Posix Shell

…like this approach, so I went ahead and started using it, and have been for a few years now. [1] https://github.com/diafygi/acme-tiny

comment by Ennea · 2023-01-19 · in ZeroSSL: XSS to session hijacking, stealing a private key (and password hash)

Personally, I'm a fan of https://github.com/diafygi/acme-tiny . 200 lines of python without any additional python requirements and only the openssl binary as external dependency.

comment by dividuum · 2022-08-21 · in Uacme: ACMEv2 client written in plain C with minimal dependencies

…avoiding unnecessary external dependencies and complexity. Be sure to use the latest version from https://github.com/diafygi/acme-tiny though :-)

comment by dividuum · 2021-08-20 · in Another free CA as an alternative to Let's Encrypt

…it is. [1]: https://github.com/go-acme/lego [2]: https://github.com/acmesh-official/acme.sh [3]: https://github.com/diafygi/acme-tiny

comment by rnijveld · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…been using acme-tiny [0] from the very beginning, and it saved me from all the frustration. [0] https://github.com/diafygi/acme-tiny

comment by TonyTrapp · 2020-09-10 · in Letsencrypt, the Good, the Bad and the Ugly

…acme-tiny [0]. However I prefer ECDSA (until we get EdDSA), so for those certs I use acme-tiny. https://github.com/diafygi/acme-tiny

comment by Panino · 2018-02-28 · in A Unix shell script implementing ACME client protocol

what about https://github.com/diafygi/acme-tiny ?

comment by Emptysister · 2018-02-28 · in A Unix shell script implementing ACME client protocol

I don't recommend using certbot directly; I use and recommend acme-tiny ( https://github.com/diafygi/acme-tiny ), which is quite simple, and doesn't require as many permissions. I keep it isolated under its own user, run it to renew a…

comment by JoshTriplett · 2017-07-07 · in Final Removal of Trust in WoSign and StartCom Certificates

I've been hosting my website using the https://github.com/diafygi/acme-tiny Python script running along with Nginx on a Raspberry Pi 1 Model B with reverse-proxy caching provided by CloudFlare from my home line for several months now. I…

comment by eriknstr · 2016-09-20 · in GoDoc: package letsencrypt

…their README to set up everything, including automatic reneweal cronjob in a couple minutes. 0: https://github.com/diafygi/acme-tiny#readme

comment by _jomo · 2016-06-23 · in Defending Our Brand

There are other clients available. My personal favorite is acme-tiny: https://github.com/diafygi/acme-tiny The 90 day validity limit is intentional. It's there to encourage users to automate the renewal process.

comment by duskwuff · 2016-06-16 · in StartCom Launches StartEncrypt, Let's Encrypt Alternative

I still like https://github.com/diafygi/acme-tiny better. It's a simple python script (300 lines) and you can understand what is going on.

comment by JelteF · 2016-05-16 · in CertBot: Automatically enable HTTPS on your website with Let's Encrypt certs

Another good method is to use https://github.com/diafygi/acme-tiny and the ciphers from https://cipherli.st

comment by JelteF · 2016-05-16 · in CertBot: Automatically enable HTTPS on your website with Let's Encrypt certs

…the account key and writing to the http challenges and cert directories, no private key access. [0] https://github.com/diafygi/acme-tiny Edit: clarification

comment by jalami · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

…a static keypair with Let's Encrypt is currently more or less straight-forward using acme-tiny. https://github.com/diafygi/acme-tiny Edit: Looks like https://github.com/lukas2511/letsencrypt.sh is capable of doing the same, as pointed out…

comment by pred_ · 2016-05-13 · in Announcing Certbot: EFF's Client for Let's Encrypt

…Honestly, I couldn't be happier about not having to manually change certificates again. [0] https://github.com/diafygi/acme-tiny

comment by throwaway7767 · 2016-03-08 · in Let's Encrypt has issued its first million certificates

…did you use? acme-tiny has been flawless for me, though it's more manual than the main client. https://github.com/diafygi/acme-tiny

comment by icebraining · 2016-02-16 · in Why I stopped using StartSSL (Hint: it involves a Chinese company)

…HTTP server configuration. Bad idea. Use something small like https://github.com/kuba/simp_le or https://github.com/diafygi/acme-tiny

comment by Tepix · 2016-02-16 · in Why I stopped using StartSSL (Hint: it involves a Chinese company)

…than doing it manually ;) [1] http://robmclarty.com/blog/how-to-secure-your-web-app-using-... [2] https://github.com/diafygi/acme-tiny

comment by robmclarty · 2016-01-30 · in Get HTTPS for free

…was my personal stuff, so I did it, but moved on to find a new solution for work. I'm using this: https://github.com/diafygi/acme-tiny . It needed a bit of a tweak to get the challenge files to show up on all of the EC2 instances that hide…

comment by twothamendment · 2016-01-21 · in AWS Certificate Manager: Deploy SSL/TLS-Based Apps on AWS

I strongly recommend using acme-tiny for generating Let's Encrypt certificates: https://github.com/diafygi/acme-tiny/ No worrying auto-configuration; no need to take sites down; no unknown unknowns. Just follow the simple steps, and…

comment by mootothemax · 2015-12-21 · in Taking Let's Encrypt for a Spin

Would love for feedback on how to make this script python 2.6 compatible! https://github.com/diafygi/acme-tiny/issues/9

comment by diafygi · 2015-12-04 · in Show HN: Acme-tiny, a tiny 200-line Let's Encrypt client

…/.well-known/acme-challenge/ { alias /var/www/challenges/; try_files $uri =404; } Snippet from https://github.com/diafygi/acme-tiny documentation.

comment by merlincorey · 2015-12-03 · in Entering Public Beta

I love this one in particular: https://github.com/diafygi/acme-tiny/

comment by StavrosK · 2015-12-03 · in Entering Public Beta

Yes, this greatly annoyed me too especially given the 3 month expiry time. https://github.com/diafygi/acme-tiny is a tiny alternative client without any dependencies (except python itself), and you can use any web server including your…

comment by ultramancool · 2015-12-03 · in Entering Public Beta

…example it shows is for nginx, in addition to being very small and having barely any dependencies. https://github.com/diafygi/acme-tiny

comment by DiThi · 2015-12-03 · in Facebook Sponsors Let's Encrypt

…but really don't want to install all those dependencies on my server just to get a free cert. https://github.com/diafygi/acme-tiny

comment by diafygi · 2015-12-03 · in Let’s encrypt automation on Debian

Eh, ACME isn't that complex. I wrote a fully automated client in less than 200 lines of python. https://github.com/diafygi/acme-tiny

comment by diafygi · 2015-11-27 · in Please petition GitHub to support HTTPS on GitHub pages