Recommendation for server certificate

craaaft · February 27, 2016, 2:03pm

Hi!

Could you recommend any certificate I could use for NethServer?

I was thinking about RapidSSL, which only costs 50 dollars/year. Any other recommandations where you had good experiences?

Thanks!

Nas · February 27, 2016, 8:09pm

You can use WoSign service 3 years cert fo free.

filippo_carletti · February 28, 2016, 8:37am

I’d use Letsencrypt.

craaaft · February 28, 2016, 9:52am

In my current infrastructure (can’t foward port 80) it isn’t possible from what I understand.

Nas · February 28, 2016, 10:23am

https://www.wosign.com/English/freeSSL.htm

giacomo · February 29, 2016, 8:16am

Actually, you can still request LE certificate, but it’s not automated and you should do the work on you own.
You have two possibility:

manually request and renwer the certs: Using Let's Encrypt in manual mode
create a proxy pass into your firewall to forward the /.well-known/acme-challenge/ URL to your NS

Example of proxy pass for LE

NS is an internal server with 192.168.1.100 ip address and named mymighty.server.org.

Your need to create a proxy pass rule into your firewall to forward all web requests for mymighty.server.org to your NS.You must make sure that all requests to this URL http://mymighty.server.org/.well-known/acme-challenge/ are routed to your NS.

jackyes · February 29, 2016, 8:26am

https://www.startssl.com/

Free (renew every year)