[Galene] Re: Heads up: Galène generates self-signed certificates

["Michael Ströder" <michael@stroeder.com>]

On 2/24/21 10:29 PM, Dave Taht wrote:
> I strongly agree with being able to generate a self signed cert.

That's easy to do.

> and asking folk to run the openssl command line is just asking for trouble.

Really?

> I vastly prefer to not register some things with any centralized
> authority and explain to potential users that's why it isn't
> registered and that the "invalid cert" thing is misleading.

Being one who runs simple shell script CAs for all internal self-hosted
stuff I definitely don't preach using public CAs everywhere.

But I have too much experience to teach people what to do with certs in
browsers and don't want to do that again for external Galène users.

> I however wouldn't mind if that there was a command within galene to
> fire off the lets encrypt facility if a box is on the public internet
> and has working dns. shell out to acme, I think....

Re-reading cert.pem and key.pem for more convenient key rotation is
already great.

But leave the rest to developers of certbot or other ACME clients. IMHO
there is way more important stuff to do.

Ciao, Michael.