Let's encrypt for webserver

Y J

October 02, 2023 04:18

Hi All

I think it will be very nice if NX supports let's encrypt in the webserver for validating and having a valid Auto renewing certificate

 

0

• 

  Campbell Steven

  October 02, 2023 21:10

  While an integrated solution would be very nice and hopefully one day we get that, this is easily doable now. Unsure if you are on Windows or Linux but for linux install acme.sh (https://github.com/acmesh-official/acme.sh) and your select your validation method (DNS-01 challenge is likely the best option) and then for the Reload Cmd I use:

  Le_ReloadCmd=cat $CERT_KEY_PATH $CERT_FULLCHAIN_PATH > /opt/networkoptix/mediaserver/var/ssl/cert.pem && systemctl restart networkoptix-mediaserver.service

  It would be great to be able to do a -HUP or reload of  media server to get the new cert but as far as I'm aware it's a restart only. I've been using this for a couple of years without issue. There are windows ports of acme.sh available so I suspect without much effort you could also adapt this for Windows.

  0
• 

  Y J

  October 06, 2023 13:10

  Thank you for sharing

   

  I was really like to see it built in so we don't have to restart the server service every time to renew the certificate

   

   

  0
• 

  Tagir Gadelshin

  • Network Optix team

  December 21, 2024 01:07

  Y J
  I'm curious about your scenario -- do you use Cloud?

  0

Please sign in to leave a comment.