https - PRO-IT Rocks!

TLS

The 47-Day Certificate: How Apple Killed the Annual SSL Renewal

The CA/Browser Forum just approved shrinking TLS certificates to 47 days by 2029. We'll soon pay the same price for commercial certs that expire faster than a DHCP lease. Time to embrace automation - those 'annoying' 90-day Let's Encrypt certificates suddenly look like visionaries.

sysadmin

A+ w Qualys SSLLABS z certyfikatem LetsEncrypt (luty 2020)

Wynik 80% w https://www.ssllabs.com/ zapewnia już ocenę A, ale żeby dostać A+ trzeba dokonać kilku modyfikacji w samym certyfikacie oraz ustawieniach apache Po pierwsze klucz musi mieć minimum 4096 bity: certbot-3.7 certonly --standalone --rsa-key-size 4096 -d pro-it.rocks -d www.pro-it.rocks Po drugie trzeba opublikować