Acme-tiny
Infrastructure
certificate management
SHOW HN2015
280points
51comments
#58of 2,565 in 2015
Top 3%of 2015 by points
How HN took it
MixedNo clear lean
8 positive, 5 neutral or asking, 4 mixed, 2 critical, out of 19 comments about the project. Thread score +0.29.
Idea: 2 for, 0 againstPrivacy: 0 for, 2 againstExecution: 2 for, 0 againstDesign: 1 for, 0 against
The thread, comment by comment
Each row is a top-level comment and its replies, in HN's order. Select a cell to open that comment on HN.
positive neutral or mixed critical about another commenter or something else the maker
What HN said
What people liked
Simple and easy to set up
From 4 comments
I set this up yesterday and it worked great. I went from a blank slate on lets encrypt, to deployed SSL cert in less than an hour. Most of the time was spent discovering that 1)…
a2tech on HNJust stopping by to say thanks. I used this yesterday and it worked great -- simplicity wins.
anebg on HNI have just used this script and it worked great. I used the lets encrypt normal client and it felt very bloated for me: virtual env, docker, tons of dependences. I hope lets…
treeform on HNThanks for this, diafygi. I set this up this afternoon with Ansible, and it's working really well. Very nice indeed.
lemming on HN
Lightweight compared to the official client
From 2 comments
I have just used this script and it worked great. I used the lets encrypt normal client and it felt very bloated for me: virtual env, docker, tons of dependences. I hope lets…
treeform on HNI think this is a nice option. I gave it a try —and read the source code. :) I opted for acmetool[1] though, which albeit much larger (and thus much more difficult to verify), is…
andmarios on HN
Objections
Does not verify HTTPS certificates on older Python versions
From 2 comments
Please be careful using urllib2, unless you are on Python 2.7.10+ or 3.5+ it does not do HTTPS certificate validation.
kingkilr on HNThis is awesome! I have had a Let's Encrypt private beta email sitting in my email for a while, but didn't want to install the client because it has so many dependencies. Are you…
dochtman on HN
Dropping Python 2.6 support is preferred
From 2 comments
I think it would be better to let 2.6 wither on the vine. Everyone is supposed to be migrating to 3.x. Supporting defunct 2.x series with new code doesn't help matters. Anyone so…
kevin_thibedeau on HNAgreed. 2.6 is was EOLed over 2 years ago and is consequently already missing significant security patches (e.g. CVE-2014-1912). I think it's unnecessary and maybe even unwise to…
derelk on HN
Requests
Python 2.6 compatibility
From 1 comment
Would love for feedback on how to make this script python 2.6 compatible! https://github.com/diafygi/acme-tiny/issues/9
diafygi on HN
Better docs on file permissions and directory setup
From 2 comments
I used it as well yesterday and it worked very well! The only thing that could be probably explained better is how to set up file permissions for the renew script, I had to do…
M4v3R on HNI set this up yesterday and it worked great. I went from a blank slate on lets encrypt, to deployed SSL cert in less than an hour. Most of the time was spent discovering that 1)…
a2tech on HN
Hardware key support such as yubikey
From 1 comment
Fun fact. There's really nothing stopping you from using a PGP/smartcard/HSM keypairs for the ACME account key. Would love to see someone adapt this or another client to use a…
diafygi on HN
Questions
Is the client doing proper SSL verification across Python versions
From 1 comment
This is awesome! I have had a Let's Encrypt private beta email sitting in my email for a while, but didn't want to install the client because it has so many dependencies. Are you…
dochtman on HN
Alternatives named
letsencrypt-nosudo
From 2 comments
Very close to https://github.com/diafygi/letsencrypt-nosudo
Socketubs on HNThanks for making this and letsencrypt-nosudo!!! I used letsencrypt-nosudo and it worked like a charm. Frankly, this kinda thing is what I expected from Let's Encrypt and was…
AndyMcConachie on HN
simp_le
From 1 comment
Also along these lines is https://github.com/kuba/simp_le , which is quite a lot larger than acme-tiny, but still much closer to something I'd want to stick in a crontab.
wiml on HN
acmetool
From 1 comment
I think this is a nice option. I gave it a try —and read the source code. :) I opted for acmetool[1] though, which albeit much larger (and thus much more difficult to verify), is…
andmarios on HN
Caddy server
From 1 comment
I think this is a nice option. I gave it a try —and read the source code. :) I opted for acmetool[1] though, which albeit much larger (and thus much more difficult to verify), is…
andmarios on HN