-
Notifications
You must be signed in to change notification settings - Fork 1
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
1 parent
00bc29a
commit 0110d0b
Showing
1 changed file
with
21 additions
and
1 deletion.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -1,6 +1,26 @@ | ||
--- | ||
order: 90 | ||
order: 160 | ||
icon: lock | ||
--- | ||
|
||
# SSL/TLS configuration | ||
|
||
A Certificate authority is a trusted entity responsible for issuing digital certificates used to authenticate the identities of entities such as websites, servers, users, and devices on the internet or within a private network | ||
|
||
## Let's Encrypt Certificate | ||
|
||
LetsEncrypt is a certificate authority that provides X.509 certificates for Transport Layer Security (TLS) encryption at no charge. The certificate is valid for 90 days, during which renewal can take place at anytime. The offer is accompanied by an automated process designed to overcome manual creation, validation, signing, installation, and renewal of certificates for secure websites | ||
|
||
The key principles behind Let's Encrypt, taken from their [website](https://letsencrypt.org/) | ||
* Free - Anyone who owns a domain name can use Let’s Encrypt to obtain a trusted certificate at zero cost. | ||
* Automatic - Software running on a web server can interact with Let’s Encrypt to painlessly obtain a certificate, securely configure it for use, and automatically take care of renewal. | ||
* Secure - Let’s Encrypt will serve as a platform for advancing TLS security best practices, both on the CA side and by helping site operators properly secure their servers. | ||
* Transparent - All certificates issued or revoked will be publicly recorded and available for anyone to inspect. | ||
* Open: The automatic issuance and renewal protocol is published as an open standard that others can adopt. | ||
* Cooperative: Much like the underlying Internet protocols themselves, Let’s Encrypt is a joint effort to benefit the community, beyond the control of any one organization. | ||
|
||
## Third Party Certificate | ||
|
||
### Comodo | ||
|
||
[Contact our support](../support) if you need to install a third party certificate. |