the itjerk

my adventures with technology

Monthly Archives: March 2016

let’s encrypt – free ssl

Let’s Encrypt is “a free, automated, and open certificate authority” from the ISRG (and now apparently the EFF), and a growing list of technology big-names. And in the sounds too good to be true department, they offer not only free ssl certificates, but an easy to use tool that configures your web server, or ACME – automated certificate management environment, in a just a few easy steps. Encrypting web traffic should be utilized not only with sites running e-commerce or email, but whenever the use of passwords is involved.

First step is to install the client via git:

sudo git clone https://github.com/letsencrypt/letsencrypt /opt/letsencrypt

Then run the config:

cd /opt/letsencrypt
./letsencrypt-auto --apache -d yoursite.com

The client will ask a few questions about the certificate you want to install. Most importantly, remember that you probably need to apply it to your default-ssl.conf. To test your new certificate, use SSLLabs website:

https://www.ssllabs.com/ssltest/analyze.html?d=yoursite.com&latest

The tutorial below even shows you how to add renewal options to cron for set and forget ease. Remember to git pull and stash to keep everything up to date. And most of all, it’s a free service!
On the web:

Let’s Encrypt – Free SSL/TLS Certificates

How To Secure Apache with Let’s Encrypt on Ubuntu 14.04

raspberry pi 3

You know, every time I get a new raspberry pi computer, a month or so later there’s a new and improved model out. So that rPi 2 B I got the kids for Xmas is now rendered obsolete by the latest rPi 3 B. Built-in wifi and bluetooth, faster processor  from the 64bit 1.2GHz quad-core chipset, faster RAM and GPU, and hopefully the same footprint because I really like the fancy “official” case they are in.

BTW, I did pickup a rPi Zero for $5, but until I find an HDMI-mini to HDMI cable that costs less than $5, I guess it will just remain in its wrapper.