Lets Encrypt cert

[ololo]

Hi,
Will there be a release of Merlin Firmware with support of ACME 2 API ?

I guess everyone already knows that ACME 1 stopped working couple of months ago...

 

[ololo]

Already found answer) https://www.snbforums.com/threads/b...4-14-beta-is-now-available.60037/#post-524837

 

[pcmarc]

Hi

I do not understand that there are still many peoples spending hours day & night getting there free lets encrypt SSL cert to work as for 15€ you have a 4 years trusted certificate working even with DDNS.
and no need to be the CCNA G.I. JOE network specialist.

Just need to know the basic.

1. Buy valid Certificate
Example: GogetSSL (follow steps and request activation by .TXT) download .txt file
2. Install Small personal webserver running for domain validation
download webserver (https://www.uniformserver.com) & install
Copy your downloaded activation .txt file in requested webserver installation folder. (www\well-known\pki-validation
4. Forward router port 80 to your local computer IP (when activation is done delete rule)
5. run webserver

Check if validation .txt file is visible from the WAN
http://yourdynamicdnshostname.xx/well-known/pki-validation

If text file is visible Wait +- 15 minutes receiving your valid certification file by mail.
Install certificate on router, nas ...
Delete created rule on router.

FYI,
Im not working for the mentioned SSL company and also receive no fee to mention there name, just get this one because the price and it has several activation methods as online chec PKI .txt file
Got no mail address from my DDNS provider to deliver certication by mail, and to complicated to spend another several day and nights to install mailserver, so personal webserver was the fastest solution i found as this activation method takes me max 30 min.


Still there if you have more questions

 

[Dabombber]

For most people, there's a bigger difference between free and $1 than there is between $1 and $15.

We do not charge a fee for our certificates. Let’s Encrypt is a nonprofit, our mission is to create a more secure and privacy-respecting Web by promoting the widespread adoption of HTTPS. Our services are free and easy to use so that every website can deploy HTTPS.

Having a 4 year certificate will most likely cause bigger problems than a shorter term when it expires since it'll most likely be unexpected. Let's Encrypt's take on it here.

As for waiting for Asus to support ACME 2, if you want something that can work in the meantime, Neilpang's acme.sh works on asuswrt. There's a script to make installing easier here, and support for *.asuscomm.com DDNS here.

 

[Grisu]

newest stock builds 81351 support ACMEv2, so it should be in Merlin's soon.
Little patience to be solved.

 

[ololo]

Hi

I do not understand that there are still many peoples spending hours day & night getting there free lets encrypt SSL cert to work as for 15€ you have a 4 years trusted certificate working even with DDNS.
and no need to be the CCNA G.I. JOE network specialist.

Just need to know the basic.

1. Buy valid Certificate
Example: GogetSSL (follow steps and request activation by .TXT) download .txt file
2. Install Small personal webserver running for domain validation
download webserver (https://www.uniformserver.com) & install
Copy your downloaded activation .txt file in requested webserver installation folder. (www\well-known\pki-validation
4. Forward router port 80 to your local computer IP (when activation is done delete rule)
5. run webserver

Check if validation .txt file is visible from the WAN
http://yourdynamicdnshostname.xx/well-known/pki-validation

If text file is visible Wait +- 15 minutes receiving your valid certification file by mail.
Install certificate on router, nas ...
Delete created rule on router.

FYI,
Im not working for the mentioned SSL company and also receive no fee to mention there name, just get this one because the price and it has several activation methods as online chec PKI .txt file
Got no mail address from my DDNS provider to deliver certication by mail, and to complicated to spend another several day and nights to install mailserver, so personal webserver was the fastest solution i found as this activation method takes me max 30 min.


Still there if you have more questions

I guess because minimal salary in Ukraine (where i`m from) is about 150$ ?
Will you pay 10% out of your salary for SSL ?

 

[pcmarc]

I guess because minimal salary in Ukraine (where i`m from) is about 150$ ?
Will you pay 10% out of your salary for SSL ?

Sorry but i am not politician, cannot help you on a salary question...

 

[ololo]

Sorry but i am not politician, cannot help you on a salary question...

I don't need your help, thanks, I'm just telling you the reality, how the rest of the world thinks. I mean they really choose between 0 and 1 dollar and that is still kind of hard choice

 

[Grisu]

DDNS from asuscomm.com is available and working again with stock and new stable Merlin 384.14, so nothing to complain about and no need for other paid services!