Re: [EXTERNAL] SSL/TLS issue with FTP

Hello Brad,

Am 29.09.2025 um 19:06 schrieb Brad Stone <bvstone@xxxxxxxxx>:

You know, you can get ssl certificates that are good for a year or more from Namecheap.com. I've been using them for years for myself and customers. I think it' like 12 bucks a year or so.

The appeal of Letsencrypt isn't that they're offering cost free certificates, but that — at least on Linux — it's a fire and forget process. Modern distros have certbot in their package system. Install, run once, and renewals will be handled automatically from there on.

ACME is a publicly documented protocol Letsencrypt uses for authentication purposes, but vendors are very slow to implement this. Maybe submit an idea to the IBM ideas site?

Most of them now, though, if you buy a 5 year certificate you still will have to update the cert every year, but that's a lot better than every 90 days.

To me, the need for manually updating certificates is highly annoying. It's not the cost, it's the lack of industry adoption for automating this process.

:wq! PoC