0

From my review of letsencrypt, it seems to require running code on the endpoint. If my endpoint is an embedded device (e.g. a brocade load balancer), how do I go about getting a letsencrypt cert?

2
  • 1
    well, you could update the cert every 90 days... Jan 11, 2017 at 5:10
  • why not use an internal CA, or a reverse proxy with LE Jan 11, 2017 at 5:13

2 Answers 2

0

You will have to use another device to get the certs from LE and then update the embedded deice manually or if available via a script.

0

Let's Encrypt doesn't require any code running on the device. You can use DNS-based domain-control validation (set a special TXT record) to demonstrate control, then issue certs as needed. It is highly recommended that you have some automated means of updating the certificates, since they expire every 90 days, but that doesn't mean running code on the device -- it could be a script to login and configure a new cert/key.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .