Lady Jessica · 2022-10-24 07:30
I have a self signed SSL certificate, but I want to have some CA to sign my CSR, does anyone of you know how to do it? (Dont say certbot because it doesnt want to work on my BCHS (OpenBSD, C, httpd, SQLite) server)
Shogun · 2022-10-24 08:47
>>33130
You don't need certbot for CA's like let's encrypt. They support ACME, so you can use OpenBSD's acme-client instead:
https://draft.websteading.net/acme-client/
Random · 2022-10-24 10:20
>>33131
What to do if my ISP blocks port 80 (not 443 tho), I heard that I can do dns-01 challenge instead of http-01 challange, or I can use DDNS to open port 80 even if my ISP blocks it.
Hiro Protagonist · 2022-10-24 10:49
>>33130
Certbot works just fine on OpenBSD.
push · 2022-10-24 11:08
>>33134
Oh... that maybe because my ISP blocks port 80, is there a way to have ssl certificate using 443 for example?
J.C. Denton · 2022-10-24 11:21
>>33133
what about 8080 port?
Six · 2022-10-24 13:22
>>33135
Yes, it's possible to use ACME over 443, but it's not standard and depends on the CA.
CA's like Let's Encrypt can work on HTTPS@443 without verifying the certificate, to help servers pick themselves up when their certs expire.
Lady Jessica · 2022-10-24 15:15
>>33130
TLS is snake oil. Permit unencrypted connections to this website.
Demeere · 2022-10-25 06:41
>>33136
It works just fine. But I tried to use certbot while having port 8080 open and HTTP server running on it, and it did not work with certbot.
Spooky · 2022-10-25 07:01
OpenBSD provides an acme-client with support more than just Let's Encrypt, and auto-renewal of certs. There's no reason to use certbot.
https://man.openbsd.org/acme-client.1
Switch · 2022-10-25 08:19
>>33145
Ok, but how am I supposed to do this when I have port 80 closed?