Linking directly to images from another URL/forum?

[Admin]

@BlantyreBotanicals

To clarify - the tool I am using is Certify The Web https://certifytheweb.com and it automates the process. It produced the TXT elements required for DNS verification/ownership, and this remains the same when you need to renew your certificate (it was either the Let’s Encrypt TXT fields, or ones generated by Certify The Web, and it asked me to leave them in place otherwise I would have to go through manual configuration next time in 90 days).

Since I am using Porkbun.com to manage my DNS, and kept their nameservers, adding the field was easy.

The only thing I need to do manually is paste in the new private key into the infinityfree cPanel, and the related chain. IIRC that’s the top and bottom boxes - the middle one remained blank.

So it’s not completely automated, but near as dammit

OK, that explains.

But that’s just as much “automated” as our own Free SSL Certificates tool is if you’re using the Let’s Encrypt provider. GoGetSSL isn’t quite as automatic because they create a new CNAME record for every validation, but our Let’s Encrypt CNAMEs are consistent.

Looking at _acme-challenge.thebotfactory.net, it points to a CNAME record from acme-dns.io. Which is pretty much what we do too, but with our own DNS servers to push the TXT records to.

I also played around with the wildcard certificates, and it seems fairly straight forward to reproduce here. So then people would only have to add one CNAME record instead of two.

@BlantyreBotanicals

I’m sure there could be some script knocked up to automate the pasting of the certificate, but TBF I would rather do that manually than risk any password(s) being inadvertantly leaked by putting them in script(s).

Web scraping has also crossed my mind, but it just seems too fragile to rely on website parsing for such an important feature.

@BlantyreBotanicals

I’m sure you guys could fully automate the process since you will have command line SSH access to your box rather than having to do with the limitations of a cPanel (even if it is a good cPanel, it’s still not SSH )

Sadly, we aren’t any more able to automate this than you are. InfinityFree gets the hosting from iFastNet, and until they provide an API to install SSL certificates, I can’t automate it.

@BlantyreBotanicals

According to the about information within the tool (windows client) it automates TLS/SSL certificates from ACME enabled Certificate Authorities including Let’s Encrypt, BuyPass Go, SSL.com and ZeroSSL.

Interesting, I didn’t know some of those companies had ACME API’s! There might be something useful in there.

@BlantyreBotanicals

Just noticed you asked whether I managed it without external tools - I think I may have exagerrated that slightly, since certify the web is technically an external tool - since you would have to use the Let’s Encrypt linux program to get your certificates, this tool is simply the windows version of the same (with bells on) and hence what I meant was, other than the tool you HAVE to have to get the certiificate (whether its the let’s encrypt program or another program to issue your certificate) you don’t need any EXTRA tools over and above the mandatory one.

You’re using external software (Certify The Web) and an external service (Acme DNS). So I would say that’s most definitely with external tools.

There are tons of tools to issue Let’s Encrypt certificates. Certbot is the most well known one for Linux, but I’ve also used Dehydrated and GetSSL.

But the client area doesn’t use the “Linux tools” per se, it actually uses AcmePHP Core, a library which can be hooked into other PHP code bases. Like the client area.

@BlantyreBotanicals

Sorry for the multiple replies

No problem! I love discussions like this, it’s always great to learn from the experience of others!