RE: https://mastodon.wolkenheim.eu/@Wolkensteine/116795057265112295

I'm now also working on a way to reliably integrate git-pages into my Home Lab. I am just missing an automated way of getting wildcard certificates from my local CA!

Since I don't know much of the technical details of ACME I decided that I wouldn't search for a ready-made tool to solve this problem, but build one myself, fully according to RFC8555.
I am not yet sold on making that open, since I will surely make some huge mistakes, but if others are interested in a tool to have DNS-01 challenges solved with a PiHole DNS provider I might open source the project when I am done with the basics and feel comfortable with it.

#coding #programming #rust #forgejo #gitpages #selfhosting #dns #acme #homelab #selfsignedcerts #certificateauthority

Am I really the only one who uses 24hrs long living certificates which get automatically renewed and signed by an own CA via ACME?

#ssl #tls #dane #acme #certificate #certificateauthority #ca

Let's #Encrypt rolls out free IP address #certificates • The Register

Let's Encrypt, a #CertificateAuthority (CA) known for its free TLS/SSL certificates, has begun issuing digital certificates for IP addresses.

It's not the first CA to do so. #PositiveSSL , #Sectigo, and #GeoTrust all offer TLS/SSL certificates for use with IP addresses, at prices ranging from $40 to $90 or so annually. But Let's Encrypt does so at no cost.
#security #tls #ssl #privacy

https://www.theregister.com/2025/07/03/lets_encrypt_rolls_out_free/

Hm, do Firefox and Vivaldi really not accept my system-wide custom CA(s)? On Windows, at least Firefox works fine if you set “security.enterprise_roots.enabled” to true, but on Linux it doesn't seem to make any difference. While in Firefox I can at least import a custom CA, I can't find anything similar in Vivaldi. 🤔

#firefox #vivaldi #ca #linux #certificateAuthority

Google is shaking up web security by ditching certificates from Chunghwa Telecom and Netlock after repeated slip-ups. Could your website be at risk? Dive into the details!

https://thedefendopsdiaries.com/googles-strategic-move-to-enhance-web-security-by-distrusting-chunghwa-telecom-and-netlock-certificates/

#google
#websecurity
#certificateauthority
#chunghwatelecom
#netlock

Got the notification by #LetsEncrypt that they will sunset the #email #certificate expiration warning. Albeit, I am a fan of it, since I have not automated all of my certificates, I can understand their argument of complexity of a system.

Albeit, I don't get, how this service costs an organization tens of thousands of dollars a year, but I do understand that operating #mail servers yourself is something the modern #Internet discourages increasingly.

More on it, in their latest blog post.

#TLS #CertificateAuthority