I agree… certs are all about trust and giving users carte blanche may not be
such a great idea. LE certs are free to my current knowledge, and are building
trust.
Angel
Scotland.
> On 3 Jul 2020, at 05:01, @lbutlr wrote:
>
> On 02 Jul 2020, at 14:08, Yves Goergen wrote:
>> I'd like to let
On 02 Jul 2020, at 14:08, Yves Goergen wrote:
> I'd like to let my users install their own SSL certificates through a web
> interface for self-management services.
WOuldn't it be simpler to just get a LE cert for those domains? What is the
advantage to having them upload their own certs?
--
Just an idea, run a separate stance locally on a random port (to avoid
collisions) with the certificate, if it fails to start bingo, if it doesn't
fail you are good to put the cert on the main instance.
On Thu, Jul 2, 2020 at 5:09 PM Yves Goergen
wrote:
> Hello,
>
> I'd like to let my users
Hello,
I'd like to let my users install their own SSL certificates through a
web interface for self-management services. If a user provides a
malicious certificate, the entire server will fail to start and the
whole system is down. This is a bit hard but that's how it is.
So I'll have to
