hook.io icon indicating copy to clipboard operation
hook.io copied to clipboard

https://hookname.hook.io invalid SSL certificate

Open zanona opened this issue 8 years ago • 14 comments

Apparently hook.io subdomains have invalid SSL certificate attached to it? Apparently the one being used is not a wildcard?

zanona avatar Apr 15 '16 12:04 zanona

Yeah, we need to buy a wildcard SSL cert.

I guess I could just buy one now? I should do that.

Marak avatar Apr 15 '16 13:04 Marak

Tracking:

#102 #101

Marak avatar Apr 15 '16 13:04 Marak

Duplicate #101

Marak avatar Apr 15 '16 13:04 Marak

Thanks @Marak. I think it will be a good addition to hook.io. :+1:

zanona avatar Apr 15 '16 13:04 zanona

I'll keep it open until I buy and deploy SSL cert.

Any suggestions from where to buy unlimited wildcard cert?

Marak avatar Apr 15 '16 13:04 Marak

@Marak This may give you some good options :) Comodo seems a nice one

zanona avatar Apr 15 '16 13:04 zanona

Hey @Marak, I was doing some research and found about this initiative. It might be worth checking it out. It could be a good idea to not only use it for the wildcard one but also to provide SSL for all custom domains without any additional hassle. https://letsencrypt.org

Currently, Netlify works with Let's Encrypt to provide SSL for custom domains. It seems to be great and much better than cloud flare's SNI where you have a list of other clients listed in the certificate description.

https://www.netlify.com/blog/2016/01/15/free-ssl-on-custom-domains

zanona avatar Apr 18 '16 09:04 zanona

@zanona -

I wouldn't mind not paying for SSL certs. The wildcard from comodo is over $100

Marak avatar Apr 18 '16 09:04 Marak

Yes, I believe this really shines over custom domains. It would add so much value to the service, since it makes a lot of sense for APIs to only accept HTTPS requests. Imagine if that can be offered with every hook. It would be crazy cool. Apparently the way it works, is by running their CLI generating the certs and validating against their server every 3 months — You could even create a hook to achieve that :).

It's seems to be very simple as long as there's control over the server it's running on. In which case, you may have :)

zanona avatar Apr 18 '16 09:04 zanona

see:

https://github.com/Daplie/node-letsencrypt https://github.com/Daplie/letsencrypt-express

Marak avatar Apr 19 '16 14:04 Marak

Awesomeness!!! Awesome

zanona avatar Apr 19 '16 14:04 zanona

any news on this?

reimertz avatar Sep 05 '16 11:09 reimertz

The good news is, next month (Jan 2018) LetsEncrypt will be releasing wildcard certificates! This could finally be closed. :smile:

ibrado avatar Dec 08 '17 07:12 ibrado

That's really good news about letsencrypt issuing wildcard @ibrado

We recently switched to LE. I'll get a wildcard cert as soon as they will issue it.

Should help in getting the subdomains secured.

Marak avatar Dec 12 '17 07:12 Marak