search

michielbdejong / node-snitch

SNI-Triggered Certificate Hook: if a TLS cert is missing, it is fetched on-the-fly from LetsEncrypt.org.
2 stars 1 forks source link

v2 of node-letsencrypt #2

Open coolaj86 opened 8 years ago

coolaj86 commented 8 years ago

If you have any interest in upgrading, I've fixed a bunch of the bugs and make node-letsencrypt great again:

Also moving those updates into https://github.com/Daplie/letsencrypt-express this evening.

michielbdejong commented 8 years ago

Thanks! I'm not currently using node-snitch, so added a line to the readme.

I did do some work on SNI + LetsEncrypt at Mozilla recently, it is meant for a computer with no public IP address to still be able to get a LetsEncrypt cert and be publically addressable, using a Pagekite server as a reverse proxy tunnel. There are two nice things about it - 1, pagekite allows SNI so many computers can share one public IP address, while still maintaining End-to-End encryption (the proxy does not terminate TLS, it only forwards traffic to the right computer), and 2, it contains a DNS server where non-addressable computers can still get a certificate, using the DNS-01 challenge. We couldn't use the SNI challenge there, because that would terminate on the proxy instead of on the intended computer. It's here: https://github.com/fxbox/dns-server