New free SSL initiative

[Me.B]

Beside we can already grab some free SSL from startcom. This initiative is big & could rock the market with mozilla & big names backing it.

https://www.letsencrypt.org/

Source: http://www.theregister.co.uk/2014/11/18/...igi_certs/

Guys we should soon too focus on improving SSL support.

M B

[sincitycloud]

I've had zpanel working with SSL without issue on one of my old cluster builds via SSL offload to the front end load balancer.

I changed up some of the old zpanel code to pull the gravatar locally, and did a find for any hard coded http:// references.

Only thing that needs to be added is the ability to generate CSR, and load SSL certs via the panel interface so the end users can do this, right now as you know it is a manual process for us if the client isn't in a clustered setup where we offload SSL to the load balancers.

But I would think this could be done with a module with minimal changes to the Sentora code.

[Me.B]

SNI support won't be an issue. The problem is the old SSL implementation when we require a dedicated IP & that would require we add an IP management stack.

For SSL I see a form where you past you keys & then enable the SSL, so website could be HTTP & HTTPS. It would also easier than the current way shown by docs. May be in 1.1 release.

M B

[Blooddarkness]

So in this case...
Sentora can manage one website with SSL lets said https://hostsentora.com and the others site host in that domain will not under HTTPS?

In that way is not a problem at all.

[Me.B]

New launch plan:

https://letsencrypt.org/2015/06/16/lets-...edule.html

First certificate: Week of July 27, 2015
General availability: Week of September 14, 2015

[apinto]

Great news!

[trojanspike]

Some people might say "Why free", there was some stories awhile ago about NSA making some SSL keys that are crackable i.e have back doors to decrypt. Make you wonder - nut then again , there're top sponsors

[apinto]

trojanspike even is NSA is using this to sniff information, Free SSL with NSA spy bundled is WAY BETTER than no SSL at all.

From my humble point of view, if NSA wants to sniff you, it is not the fact you are using SSL that will prevent them to do it.

Also, if anyone has information worth keeping away from NSA they should take extra steps and invest extra time and money to protect it (one could argue that any information is worth keeping away from NSA but it is not my point here).

Anyways, I do not think NSA is really behind all this, however... makes you wonder

[Me.B]

https://letsencrypt.org/2015/10/19/lets-...usted.html

The have now the root SSL. Seem a beta running already.

Looks more and more intersting:

https://letsencrypt.org/howitworks/

[TGates]

Yes, I have been keeping en eye on it also

Thats how is should be... provided they do the same kind of checks that a paid-for ssl provider does