<div dir="ltr"><div><br></div><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">When <a href="https://letsencrypt.org/howitworks/">Let’s Encrypt</a> based on ACME (Automated Certificate Management Environment) spec launches in mid-2015, enabling HTTPS for any site will be as easy as installing a small piece of certificate management software on the server:</p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)"><code style="font-family:monospace,serif;border:1px solid rgb(232,232,232);border-radius:3px;padding:1px 5px;background-color:rgb(238,238,255)">$ sudo apt-get install lets-encrypt</code></p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)"><code style="font-family:monospace,serif;border:1px solid rgb(232,232,232);border-radius:3px;padding:1px 5px;background-color:rgb(238,238,255)">$ lets-encrypt <a href="http://example.com">example.com</a></code></p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">That’s all there is to it! <a href="https://example.com">https://example.com</a> is immediately live. Automatic renew and on demand revocation are equally easier.</p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">A sample let's encrypt SSL client demo is <a href="https://www.youtube.com/watch?v=Gas_sSB-5SU">here</a>. For documentation, check <a href="https://letsencrypt.readthedocs.org/en/latest/intro.html#about-the-let-s-encrypt-client">here</a>.</p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">Let's encrypt is free, open and automated with out of box support for apache/nginx and standalone support for other web servers. It automatically configures an app deployed on apache or nginx with a single command with absolute no human intervention. Its stand alone mode (for other web servers) generates SSL cert for the app(domain) which can be manually configured/installed or a better method will be installation via an automated script(like for keycloak server). Currently, Let’s Encrypt provides a developer preview only intended for testers and developers. It, at present installs certs signed by the TEST CA, which might generate exception warnings in client browsers. But, they have announced to come out with final solution by Mid 2015.</p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">As Keycloak will be requiring SSL, let's encrypt standalone support with a script for automatic installation of cert on keycloak/wildfly server might come out as one easier rescue. </p><p style="margin:0px 0px 15px;padding:0px;color:rgb(17,17,17);font-family:'Open Sans',Helvetica,Arial,sans-serif;line-height:24px;background-color:rgb(253,253,253)">Cheers,</p>-- <br><div class="gmail_signature"><div dir="ltr"><div><div dir="ltr"><font color="#888888"><div><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-size:14px;font-family:proxima-nova-1,proxima-nova-2,Tahoma,Helvetica,Verdana,sans-serif;vertical-align:baseline;border-spacing:0px;color:rgb(51,51,51);line-height:18.2000007629395px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:30px"> </td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:baseline;width:auto"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;line-height:0"><a href="http://about.me/girirajsharma?promo=email_sig" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;color:rgb(58,169,233);text-decoration:none;display:inline-block" target="_blank"><table border="0" cellpadding="0" cellspacing="0" style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;border-spacing:0px"><tbody style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;width:auto;line-height:1"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:bold;font-style:inherit;font-size:18px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;line-height:1;color:rgb(51,51,51)">Giriraj Sharma</div><div style="margin:3px 0px 0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-size:12px;font-family:proxima-nova-1,Proxima-Nova,Helvetica,Arial,sans-serif;vertical-align:baseline;color:rgb(43,130,173)">about.me/girirajsharma</div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td align="left" valign="top" style="padding:8px 0px 0px;border:0px;outline:0px;font-style:inherit;font-family:inherit;vertical-align:top;width:auto;line-height:1"><div style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline;text-align:right;height:4px;background-color:rgb(197,208,224)"><img src="http://d13pix9kaak6wt.cloudfront.net/signature/colorbar.png" width="88" alt="" height="4" style="margin: 0px; padding: 0px; border: 0px; outline: 0px; font-weight: inherit; font-style: inherit; font-family: inherit; vertical-align: baseline; float: right; display: block;"></div></td></tr></tbody></table></a> </div></td></tr><tr style="margin:0px;padding:0px;border:0px;outline:0px;font-weight:inherit;font-style:inherit;font-family:inherit;vertical-align:baseline"><td style="padding:0px;border:0px;outline:0px;font-style:inherit;font-size:0px;font-family:inherit;vertical-align:baseline;width:auto;height:20px"> </td></tr></tbody></table>Giriraj Sharma, </div><div>Department of Computer Science </div><div>National Institute of Technology Hamirpur </div><div>Himachal Pradesh, India 177005<br></div></font></div></div></div></div>
</div>