B4J Question Certbot Discontinuing Windows Beta Support in 2024

[JackKirk]

Erel's B4J library [server] LetsEncrypt SSL certificates
REFERENCE: https://www.b4x.com/android/forum/threads/server-letsencrypt-ssl-certificates.159285/#content

Documenting what I have done in this area I had reason to revisit the Certbot site - which I find quite confusing to say the least.

I came across

https://community.letsencrypt.org/t/certbot-discontinuing-windows-beta-support-in-2024/208101

What does this mean with respect to the long term future of Erel's library?

 

[Magma]

Erel's B4J library [server] LetsEncrypt SSL certificates
REFERENCE: https://www.b4x.com/android/forum/threads/server-letsencrypt-ssl-certificates.159285/#content

Documenting what I have done in this area I had reason to revisit the Certbot site - which I find quite confusing to say the least.

I came across

https://community.letsencrypt.org/t/certbot-discontinuing-windows-beta-support-in-2024/208101

What does this mean with respect to the long term future of Erel's library?

I think that this not mean something because is just a utility that downloads (?) the cert...

for that reason if u see the 5th step:
I wasn't able to install CertBot on one of my Linux servers. Eventually I used a different client named getssl: https://github.com/srvrco/getssl

Erel choice was getssl.... so I think he will find other utility to download/create the ssl certs... (for Windows)

At least... we hope...

You never know... may be after some months we listen that LetsEncrypt will close ! (Hope not... SSLs are getting more expensive)

 

[Erel]

The (most) important code in the example I posted is the code that reloads the certificates. So even if you use a different tool to download the certificates, the server can be configured to hot reload the update automatically.

 

[JackKirk]

So even if you use a different tool to download the certificates

Any suggestions would be welcome...

 

[Sandman]

Any suggestions would be welcome...

[server] LetsEncrypt SSL certificates

LetsEncrypt provides SSL certificates for free. The certificates are created and renewed using a tool named certbot. The process can be a bit confusing, especially if you want to automate it. As B4J servers can run "forever" a solution that automates the steps and allows hot reloading of the...

www.b4x.com

 

[JackKirk]

[server] LetsEncrypt SSL certificates

Sandman, I'm looking at the Lego options here:
https://go-acme.github.io/lego/usage/cli/options/

And the way Erel's Letsencrypt module calls Certbot:

    Dim params As List
    params.Initialize
    params.AddAll(Array("certonly", "--agree-tos", "--register-unsafely-without-email", "--noninteractive", "--webroot", "-w"))
    params.AddAll(Array(WWWFolder, "-d", Main.Domain))
    params.AddAll(Array("--work-dir", CertBotWorkingFolder))
    params.AddAll(Array("--logs-dir", File.Combine(CertBotWorkingFolder, "logs")))
    params.AddAll(Array("--config-dir", File.Combine(CertBotWorkingFolder, "config")))
    'uncomment to force renewal:
'    params.Add("--force-renewal") : Log("forcing renewal")
    Dim shl As Shell
    shl.Initialize("shl", CertBotExe, params)

There is no commonality.

Do you use Lego with Erel's Letsencrypt module?

 

[Sandman]

Do you use Lego with Erel's Letsencrypt module?

No, I don't use any B4X solutions server-side. Like I wrote, I use Lego with the Apache web server.

 

[JackKirk]

So even if you use a different tool to download the certificates, the server can be configured to hot reload the update automatically.

Erel, is there any chance you could recode your Letsencrypt module to work with Lego instead of Certbot?

 

[Magma]

Erel, is there any chance you could recode your Letsencrypt module to work with Lego instead of Certbot?

hi.. here there are some examples:

Lego: Windows-based auto-renewal of Let's Encrypt certs, including wildcards - hMailServer forum

you can check the parameters of command-lines and add/change the right parameters

 

[JackKirk]

hi.. here there are some examples:

Magma, this has only led to my sense of being out of my depth going to Mariana Trench proportions.