On the fly (and free) SSL registration and renewal inside OpenResty/nginx with Let's Encrypt. This OpenResty plugin automatically and transparently issues SSL certificates from Let's Encrypt (a free certificate authority) as requests are received. By default, resty-auto-ssl will not perform any SSL registrations until you define the allow_domain function. You may return true to handle all possible domains, but be aware that bogus SNI hostnames can then be used to trigger an indefinite number of SSL registration attempts (which will be rejected). A better approach may be to whitelist the allowed domains in some way.
Features
- A SSL request for a SNI hostname is received
- If the system already has a SSL certificate for that domain, it is immediately returned (with OCSP stapling)
- If the system does not yet have an SSL certificate for this domain, it issues a new SSL certificate from Let's Encrypt
- Domain validation is handled for you
- Documentation available
- Examples included
- Internally, lua-resty-auto-ssl uses dehydrated as it's Let's Encrypt client
Categories
SecurityLicense
MIT LicenseFollow lua-resty-auto-ssl
Other Useful Business Software
Our Free Plans just got better! | Auth0
You asked, we delivered! Auth0 is excited to expand our Free and Paid plans to include more options so you can focus on building, deploying, and scaling applications without having to worry about your security. Auth0 now, thank yourself later.
Rate This Project
Login To Rate This Project
User Reviews
Be the first to post a review of lua-resty-auto-ssl!