Switch to BuyPass as cert provider?

muppeth commented

2021-11-05 13:22:50 +01:00

Owner

Due to latest issues with letsencrypt, older devices have problems with using disroot services due to lack of support for new root certificate. One of the solutions would be to change provider of certificates. As suggested by selea we could switch to BuyPass certs. We could still use certbot so not much issues would be required. Question is, if we want to change form letsencrypt to something else.

muppeth added the

labels 2021-11-05 13:22:50 +01:00

muppeth self-assigned this 2021-11-05 13:22:51 +01:00

meaz was assigned by muppeth

2021-11-05 13:22:51 +01:00

avg_joe was assigned by muppeth

2021-11-05 13:22:51 +01:00

fede was assigned by muppeth

2021-11-05 13:22:51 +01:00

antilopa was assigned by muppeth

2021-11-05 13:22:51 +01:00

muppeth commented

2021-11-05 13:24:10 +01:00

Author

Owner

I think we should check what are the cons of the switch. Get to know more about the company behind it etc. Would be nice if someone could take on that one to do some investigation.

strypey commented

2021-11-06 01:27:18 +01:00

Is there any way I can help with this? The Wikipedia page is a stub whose only sources are pages from the company's own website, but this one could be useful for identifying some of the boxes that free ACME certs from Buypass do and don't tick:

https://www.buypass.com/ssl/products/acme

Is there any way I can help with this? The Wikipedia page is a stub whose only sources are pages from the company's own website, but this one could be useful for identifying some of the boxes that free ACME certs from Buypass do and don't tick: https://www.buypass.com/ssl/products/acme

muppeth commented

2021-11-09 08:58:09 +01:00

Author

Owner

thanks @strypey I will check this out. I am a bit busy this week so not sure I can properly look into it. Just out of curiosity. Removing and recnfiguring deltachat does not help? On nextcloud's ios app that dd the trick as old root cert was just cached and that was the reason.

fede commented

2021-11-11 16:21:24 +01:00

Owner

Well, Let's Encrypt is a non-profit provider while Buypass is not to begin with. I'm not sure about this move to be honest. Also Buypass certs has a 80 €/year cost if I get it right.

strypey commented

2021-11-13 10:56:46 +01:00

@fede

Buypass certs has a 80 €/year cost if I get it right.

They also have paid plans, yes, but what's being proposed here is the gratis plan (using ACME, no charge). See the link in my first comment.

@fede > Buypass certs has a 80 €/year cost if I get it right. They also have paid plans, yes, but what's being proposed here is the gratis plan (using ACME, no charge). See the link in my first comment.

fede commented

2021-11-14 04:55:10 +01:00

Owner

Hi, @strypey! Thanks for the clarification.
I still don't understand what would be the difference (besides what I noted before about the kind of organizations they are). I couldn't find information about what @muppeth mentioned (older devices cert support).

Hi, @strypey! Thanks for the clarification. I still don't understand what would be the difference (besides what I noted before about the kind of organizations they are). I couldn't find information about what @muppeth mentioned (older devices cert support).

muppeth commented

2021-11-22 06:54:00 +01:00

Author

Owner

Looks like buypass does not allow more then 5 certs per domain, which makes it unusable for us. Since it's issuer for profit it makes sense why they impose such restrictions and does not look like they will change it at any point.

@strypey don't you have possibility to upgrade to lineage? I know this sucks, but non valid ssl is just a sign to consider upgrading software. Soon we will be (as most of the internet) phasing out old version of TLS and such and your problem of running very outdated sfotware will only increase.

Looks like buypass does not allow more then 5 certs per domain, which makes it unusable for us. Since it's issuer for profit it makes sense why they impose such restrictions and does not look like they will change it at any point. @strypey don't you have possibility to upgrade to lineage? I know this sucks, but non valid ssl is just a sign to consider upgrading software. Soon we will be (as most of the internet) phasing out old version of TLS and such and your problem of running very outdated sfotware will only increase.

👍 2

muppeth closed this issue

2022-03-04 22:52:09 +01:00

Switch to BuyPass as cert provider? #165