LetsEncrypt SSL Certs with ASSP

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

LetsEncrypt SSL Certs with ASSP

Doug Lytle
Hey guys,

I just followed and setup LetsEncrypt SSL Certificates for my Zimbra
mail server following the below link:

https://forums.zimbra.org/viewtopic.php?f=15&t=60781

I wanted to know if this could also be used for SSL/TLS communications
with ASSP?

We have problems with our MACs not liking to use self-signed
certificates and was hoping that using a valid certificate, we could get
around that issue.

Doug


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: LetsEncrypt SSL Certs with ASSP

Thomas Eckardt/eck
As long as you provide the certificate(s) and privat key(s) in PEM format, this should be possible.

Thomas




Von:        Doug Lytle <[hidden email]>
An:        ASSP Test <[hidden email]>
Datum:        22.01.2017 13:56
Betreff:        [Assp-test] LetsEncrypt SSL Certs with ASSP




Hey guys,

I just followed and setup LetsEncrypt SSL Certificates for my Zimbra
mail server following the below link:

https://forums.zimbra.org/viewtopic.php?f=15&t=60781

I wanted to know if this could also be used for SSL/TLS communications
with ASSP?

We have problems with our MACs not liking to use self-signed
certificates and was hoping that using a valid certificate, we could get
around that issue.

Doug


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: LetsEncrypt SSL Certs with ASSP

Doug Lytle
On 01/22/2017 08:06 AM, Thomas Eckardt wrote:
> As long as you provide the certificate(s) and privat key(s) in PEM
> format, this should be possible.
>
> Thomas
>

Indeed it does,

Thanks Thomas!

Doug

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: LetsEncrypt SSL Certs with ASSP

Rusty Nejdl
In reply to this post by Thomas Eckardt/eck

I just converted to this a week ago from a pay for cert vendor.  Works like a charm.

 

SSLCertFile:=/usr/local/etc/letsencrypt/live/ringofsaturn.com/cert.pem
SSLKeyFile:=/usr/local/etc/letsencrypt/live/ringofsaturn.com/privkey.pem
SSLPKPassword:=
SSLCaFile:=/usr/local/etc/letsencrypt/live/ringofsaturn.com/chain.pem

This is for a FreeBSD box so your path may be different.

Rusty Nejdl

On 2017-01-22 07:06, Thomas Eckardt wrote:

As long as you provide the certificate(s) and privat key(s) in PEM format, this should be possible.

Thomas




Von:        Doug Lytle <[hidden email]>
An:        ASSP Test <[hidden email]>
Datum:        22.01.2017 13:56
Betreff:        [Assp-test] LetsEncrypt SSL Certs with ASSP




Hey guys,

I just followed and setup LetsEncrypt SSL Certificates for my Zimbra
mail server following the below link:

https://forums.zimbra.org/viewtopic.php?f=15&t=60781

I wanted to know if this could also be used for SSL/TLS communications
with ASSP?

We have problems with our MACs not liking to use self-signed
certificates and was hoping that using a valid certificate, we could get
around that issue.

Doug


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot

_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: LetsEncrypt SSL Certs with ASSP

GrayHat
In reply to this post by Doug Lytle
:: On Sun, 22 Jan 2017 07:55:22 -0500
:: <[hidden email]>
:: Doug Lytle <[hidden email]> wrote:

> Hey guys,
>
> I just followed and setup LetsEncrypt SSL Certificates for my Zimbra
> mail server following the below link:
>
> https://forums.zimbra.org/viewtopic.php?f=15&t=60781
>
> I wanted to know if this could also be used for SSL/TLS
> communications with ASSP?

Well, given that ASSP is written in Perl, I suspect that, willing to
implement support for the "Let's Encrypt" framework, one should start
from stuff like

https://github.com/do-know/Crypt-LE

https://metacpan.org/pod/Net::ACME

https://metacpan.org/pod/Protocol::ACME

either one of the above should do, then, by the way the thing should be
implemented inside ASSP (not sure it may fit into a plugin); as for the
"Let's Encrypt" initiative, for the ones which don't know about it

https://letsencrypt.org/

HTH



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test
Reply | Threaded
Open this post in threaded view
|

Re: LetsEncrypt SSL Certs with ASSP

Thomas Eckardt/eck
It is not a technical problem to implement a LetsEncrypt client in to assp, But -  I think, there is no need to do this.
An simple system cron jib using the available clients (bots) or scripts will do it possibly better (e.g. for multiple certs and domains or servers at a time).
Copying the required key and cert files after creation in to assp's certs location, to make assp using them, is quite simple.

Thomas




Von:        Grayhat <[hidden email]>
An:        [hidden email]
Datum:        23.01.2017 09:21
Betreff:        Re: [Assp-test] LetsEncrypt SSL Certs with ASSP




:: On Sun, 22 Jan 2017 07:55:22 -0500
:: <[hidden email]>
:: Doug Lytle <[hidden email]> wrote:

> Hey guys,
>
> I just followed and setup LetsEncrypt SSL Certificates for my Zimbra
> mail server following the below link:
>
>
https://forums.zimbra.org/viewtopic.php?f=15&t=60781
>
> I wanted to know if this could also be used for SSL/TLS
> communications with ASSP?

Well, given that ASSP is written in Perl, I suspect that, willing to
implement support for the "Let's Encrypt" framework, one should start
from stuff like

https://github.com/do-know/Crypt-LE

https://metacpan.org/pod/Net::ACME

https://metacpan.org/pod/Protocol::ACME

either one of the above should do, then, by the way the thing should be
implemented inside ASSP (not sure it may fit into a plugin); as for the
"Let's Encrypt" initiative, for the ones which don't know about it

https://letsencrypt.org/

HTH



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org!
http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test






DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no known virus in this email!
*******************************************************


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-test mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-test