Hi! I installed discourse ready vps on digitalocean. My website works on https. Free lets ssl i guess. Is it really safe? I also bought comodossl. When i want to create certificate on comodo panel. It asks me my CSR code. How can I create CSR? Or do i do something wrong? First time I am doing. Please direct me.

The SSL generated by discourse is issued by letsencrypt and it is pretty safe. However if You want to set up your own ssl.certificate, follow these instructions: [image] Allow SSL / HTTPS for your Discourse Docker setup Self-Hosting This guide is likely out of date as there are now very few reasons not to use the built-in Let’s Encrypt certificate that Just Works. See also: 2023-04-10 @pfaffman says: This is left here mostly for historical purposes. So you’d like to enable SSL for your Docker-based Discourse setup? Let’s do it! This guide assumes you used all the standard install defaults – a container configuration file at/var/discourse/containers/app.yml and Discourse docker is installed at: /var/discourse Buy a SS…

There’s no difference from a security perspective between Let’s Encrypt and Comodo. The encryption supported is the same. The only difference is that one is free and automatic, the other costs money and must be renewed manually. Unless you have a really, really good reason to need a paid cert, stick with Let’s Encrypt and save yourself the headache (and some money).

Let’s Encrypt for forever? Or need to something else annual like renewing?

There’s no reason to buy certificates for your discourse installation.

A certificate is a certificate*, and Comodo has been pretty well established as a bad actor in this field due to their nonstop FUD against Let’s Encrypt (to the extent of using their own web browser to mark sites using Let’s Encrypt certs as “not secure”, or attempting to trademark Let’s Encrypt themselves). The certificate doesn’t dictate the kind or strength of the encryption used. Bottom line, use the cert from Let’s Encrypt; there’s simply no need for anything else. *Well, mostly. Certs can be DV (domain validation), OV (organization validation), or EV (extended validation), differing in what they validate (and, naturally, the cost). A DV cert validates that it does in fact belong to the domain it names. An OV cert validates that it belongs to the organization it names (though nothing shows you this in a browser unless you drill down to the certificate details). An EV cert does the same thing as an OV cert, only more so–and historically has given the “green bar” in the browser, though that’s going away shortly. No variety of cert validates that its owner is a “good guy,” and there’s absolutely no difference in encryption levels among them.

[image] danb35: A DV cert validates that it does in fact belong to the domain it names Let’s Encrypt effectively achieves this, by validating the DNS name at enrollment. [image] danb35: An EV cert does the same thing as an OV cert, only more so–and historically has given the “green bar” in the browser, though that’s going away shortly. Chrome 77 removed the green bar, for reference we’re currently on 78.x in release and 79.x in beta. [image] Extended Validation Certificates are (Really, Really) Dead Almost one year ago now, I declared extended validation certificates dead [https://www.troyhunt.com/extended-validation-certificates-are-dead/]. The entity name had just been removed from Safari on iOS, it was about to be removed from Safari...

[image] Stephen: Chrome 77 removed the green bar, for reference we’re currently on 79.x Hence my saying “historically.” It’s gone away in Chrome, but it’s still there in Firefox and IE (the only others I can readily test at the moment).

It’s gone from the address bar in Firefox 70 too, which landed last month. It’s also gone from Safari. I’m not sure IE counts as a browser any more, with a market share of 1.98% as of October of 2019. I think we can confirm EV as stone dead at this point.

[image] Stephen: I’m not sure IE counts as a browser any more, with a market share of 1.98% as of October of 2019. What about Microsoft Edge?

SSL installation

Product Support Self-hosting

pfaffman (Jay Pfaffman) November 5, 2019, 9:40am 5

It renews automatically every three months. It’s free. And works.

Topic		Replies	Views
[PAID] Need help to Install SSL Marketplace	10	1444	July 14, 2017
How to install SSL certificate in Discourse Product Support	4	7388	January 16, 2019
Can i change Lets Encrypt to EssentialSSL / Wildcard SLL Product Support	2	1124	April 5, 2019
Set up HTTPS support with Let's Encrypt Self-Hosting how-to , domains	2	111812	February 25, 2024
[PAID] setup ssl - Let's encrypt Marketplace	1	1584	August 27, 2017

SSL installation

Related topics