openphacts / GLOBAL

Global project issues [private for now. owner lee harland]
3 stars 0 forks source link

SSL certificate on ops2 #358

Open stain opened 8 years ago

stain commented 8 years ago

The SSL certificate on the Open PHACTS dev server https://ops2.few.vu.nl expired on 2016-02-11.

As I mentioned on the ops-dev skype chat I have installed a temporary SSL certificate from letsencrypt.org on https://ops2.few.vu.nl/2.0/ - which should make https://dev.openphacts.org/docs/develop work again -- but it will expire by 2016-05-25.

This is because their free certificates expire after 3 months.

It's possible to set it to auto-renew using a crontab and the letsencrypt script - but I have not done so yet.

The Let's Encrypt root CA is rather new, so I don't know if this will work well with say Java/Knime or Python/curl. (but you can also use http://ops2.few.vu.nl/ directly which doesn't have any encryption)

The previous certificate was from Terena - which I believe used to bulk-sell SSL certificates for acedemia. I believe the deal has now ended and it is now DigiCert that supplies for .nl acedemia.

Are the .nl folks able to renew the old ops2 certificate or purchase a similar one, or should we continue using the letsencrypt?