build icon indicating copy to clipboard operation
build copied to clipboard

Automate SSL Cert infrastructure

Open ryanaslett opened this issue 7 months ago • 5 comments

Per https://github.com/nodejs/build/issues/4029 Our current paid SSL certs are valid until 2027, however, they will still need to be manually replaced everywhere, and will need to be funded in the future to ensure continuity of service.

We can eliminate the maintenance and cost of keeping our certificates current by switching over to an ACME based solution (https://acmeclients.com/), giving us free, and automated replacements.

In general we should be using certbot everywhere we can, and fall back on acme.sh if there are any environments where certbot is unsupported.

unofficial-builds is already using this, so the pattern is easily replicable for our other services.

ryanaslett avatar Mar 12 '25 19:03 ryanaslett