Are you looking to secure a simple web service thats not needing industrial strength encryption and authentication? Well this service produces certs
that are recognized as being valid, and it uses AES-128 for its private key (symmetric cipher) with TLS, so its not super-elite but it will do the job. The site is Let's Encrypt found at https://letsencrypt.org. Its a service
that offers free web certificates for secure computing. I'm not sure of all the specifics to this service but it is sponsored by the EFF (The Electronic Frontier Foundation) so its got my vote.

The site states:
"Let's Encrypt is a global Certificate Authority (CA). We let people and organizations around the world obtain, renew, and manage SSL/TLS
certificates. Our certificates can be used by websites to enable secure
HTTPS connections."

"Let's Encrypt offers Domain Validation (DV) certificates. We do not offer Organization Validation (OV) or Extended Validation (EV) primarily because we cannot automate issuance for thoe types of certificates."

* wildcard certs are also available.

Props to Pequito for bringing this to my attention.

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Sp00knet Master Hub [PHATstar] (700:100/0)

Are you looking to secure a simple web service thats not needing

Let's Encrypt is awesome. Since it's introduction a HUGE percentage of websites
have gone from unsecure to secure in a short amount of time.

I use it for Xibalba and my blog. At some point I need to stop being lazy and switch over to wildcard certs so I can use it for my ownCloud (soon to be NextCloud most likely) setup as well.



--- ENiGMA 1/2 v0.0.9-alpha (linux; x64; 8.9.4)
* Origin: Xibalba -+- xibalba.l33t.codes:44510 (700:100/9)

On 05/22/18, NuSkooler said the following...

On Tuesday, May 22nd warmfuzzy was heard saying...

Are you looking to secure a simple web service thats not needing

Let's Encrypt is awesome. Since it's introduction a HUGE percentage of websites have gone from unsecure to secure in a short amount of time.

I use it for Xibalba and my blog. At some point I need to stop being
lazy and switch over to wildcard certs so I can use it for my ownCloud (soon to be NextCloud most likely) setup as well.

Might be better methods vs what I am using for now but I chose to use
cert-bot from lets-encrypt to encrypt my website:

https://twinklebbs.net

Also a private subdomain which I host for my wife's blog, but I agree this is
a great setup easy and free for those of us looking for an alternative.

I am unsure NuSkooler if it supports wildcards but maybe it is just the one I went with from LetsEncrypt to secure my main domain/subdomain and now IRC.

Chees!
Pequito

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Twinkle BBS # (700:100/4)

Re: RE: https://letsencrypt.org
By: NuSkooler to warmfuzzy on Tue May 22 2018 07:01 pm

I use it for Xibalba and my blog. At some point I need to stop being lazy and switch over to wildcard certs so I can use it for my ownCloud (soon to be NextCloud most likely) setup as well.

Synchronet's web server apparently has some support for LE certs, but I haven't gotten it working on my BBS yet. Any pointers, folks?
--- SBBSecho 3.03-Win32
* Origin: http://realitycheckbbs.org (700:100/20)

On 05/23/18, poindexter FORTRAN said the following...

Re: RE: https://letsencrypt.org
By: NuSkooler to warmfuzzy on Tue May 22 2018 07:01 pm

I use it for Xibalba and my blog. At some point I need to stop being l and switch over to wildcard certs so I can use it for my ownCloud (soo be NextCloud most likely) setup as well.

Synchronet's web server apparently has some support for LE certs, but I haven't gotten it working on my BBS yet. Any pointers, folks?

Gotten them to work for apache2 domain and sub-domains and even my IRC server should be able to run it up quick, pending if you are windows/linux. I found linux to be the way to go but thats me. :P

Cheers!
Pequito

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Twinkle BBS # (700:100/4)

Re: Re: https://letsencrypt.org
By: Pequito to poindexter FORTRAN on Thu May 24 2018 12:30 pm

Gotten them to work for apache2 domain and sub-domains and even my IRC server should be able to run it up quick, pending if you are windows/linux. I found linux to be the way to go but thats me. :P

I got started with Synchronet because I liked being able to have an all-in-one package running in my garage under Windows, but I'm getting closer to moving to SBBS on a VPS. I'm waiting for the tick and bink features to get a little better.

Apparently people use Apache for the heavy lifting when they run SBBS under Linux, and let the Synchronet web server run like an app server. If I do that, getting certs to work is a piece of cake, relatively.
--- SBBSecho 3.03-Win32
* Origin: http://realitycheckbbs.org (700:100/20)

On 05/25/18, poindexter FORTRAN said the following...

Re: Re: https://letsencrypt.org
By: Pequito to poindexter FORTRAN on Thu May 24 2018 12:30 pm

Gotten them to work for apache2 domain and sub-domains and even my IRC server should be able to run it up quick, pending if you are windows/l I found linux to be the way to go but thats me. :P

I got started with Synchronet because I liked being able to have an all-in-one package running in my garage under Windows, but I'm getting closer to moving to SBBS on a VPS. I'm waiting for the tick and bink features to get a little better.

I hear ya, I did play with SBBS initially but saw or felt it was too memory intense even for just having a couple items running. This might be due to
the GUI they have which is normally never good for a server base. I did run things under windows initially and yes I moved to linux and my own VM hosted
@ home vs VPS.

Apparently people use Apache for the heavy lifting when they run SBBS under Linux, and let the Synchronet web server run like an app server.
If I do that, getting certs to work is a piece of cake, relatively.

I do use apache2 over any other web hosting/serving software as it has been around a long while and is not all bad to configure.

Cheers!
Pequito

--- Mystic BBS v1.12 A39 2018/04/21 (Linux/64)
* Origin: Twinkle BBS # (700:100/4)

Re: Re: https://letsencrypt.org
By: Pequito to poindexter FORTRAN on Sat May 26 2018 10:05 am

I hear ya, I did play with SBBS initially but saw or felt it was too memory intense even for just having a couple items running. This might be due to the GUI they have which is normally never good for a server base. I did run things under windows initially and yes I moved to linux and my own VM hosted @ home vs VPS.

<thinks back> my first SBBS box was a HP Pavilion, with a Celeron 533mhz CPU and 512 MB of RAM. Crappy old ATA-33 drive interface. I was surprised it ran, let alone served anything! :)
--- SBBSecho 3.03-Win32
* Origin: http://realitycheckbbs.org (700:100/20)