Won't people need to have LetsEncrypt CA certificate installed on their computers to not get that red SSL incorrect certificate thing? Other than that, this is awesome.
Also, I really wish AOL would have donated their root certs to y'all[2] so you didn't have to set up a whole new CA.
[1]: https://letsencrypt.org/howitworks/technology/
[2]: https://moderncrypto.org/mail-archive/messaging/2014/000618....
- Obtain a browser-trusted certificate and set it up on your web serve
IdenTrust is listed as a sponsor and is the CA for the letsencrypt.org certificate so I'm guessing they're doing some sort of partnership.
https://github.com/letsencrypt/lets-encrypt-preview/issues
or e-mail me about them. So far this has only been tested on a handful of configurations and will clearly need to be tested on many more over the next few months.
Please be careful when running it on your live server: if it does manage to get a cert right now, that cert won't be accepted by clients and will produce cert warnings (and if you use the "Secure" option at the end, you'll also be generating redirects from the HTTP site to the cert-warning-generating HTTPS version).