Fabtools VS letsencrypt

Fabtools

We haven't tracked posts mentioning Fabtools yet.
Tracking mentions began in Dec 2020.

letsencrypt

• ACME with Google Domains using a DNS Zone in GCS DNS
  1 project | /r/googlecloud | 28 Jan 2023

  This seems to be not implemented in certbot, yet: https://github.com/certbot/certbot/issues/6566

• OpenSpeedTest in docker through DSM Reverse Proxy - incorrect upload speeds
  2 projects | /r/synology | 20 Jan 2023

  If you do go with NPM or Traefik, under the covers it's using certbot to request/renew your certificates through Let's Encrypt using the DNS-01 challenge, meaning you can get wildcard certs and don't have to futz around with port forwards. Again I'd think Caddy has similar functionality, I just have not used it personally. Raw NGINX you probably don't want to try out yet considering it requires manually doing the configs

• Certbot run.bat file identified as batloader trojan by windows defender. Windows defender alerted me of a trojan which appears to simply be the startup batch script for certbot. Currently running full system scan, but I suspect it to be a false positive. Any ideas?
  1 project | /r/ssl | 26 Nov 2022
• Snap Store administrators removed signal-desktop from Ubuntu Snap
  14 projects | news.ycombinator.com | 3 Nov 2022

  certbot won't be missed. The code quality is pretty poor.

  https://github.com/certbot/certbot/issues 5000 bugs and it most of it can be replaced by much smaller tools

• Good Use Of Golang?
  1 project | /r/golang | 4 Sep 2022

  Here’s a good code reference (Python and rust): https://github.com/certbot/certbot

• Let's Encrypt Certbot Not Working on FreeBSD
  1 project | /r/freebsd | 1 Sep 2022

  I am trying to migrate off of Linux and back to FreeBSD, but I hit a problem today. The Let's Encrypt Certbot is not installing. A bit surprising, given how important it is. So I thought I would notify the community Here is my bug report. https://github.com/certbot/certbot/issues/9394

• How to update Certbot on Debian 11
  1 project | dev.to | 28 Aug 2022

  Last release: https://github.com/certbot/certbot/releases (on 28th August 2022 = 1.29.0)

• Uacme: ACMEv2 client written in plain C with minimal dependencies
  12 projects | news.ycombinator.com | 21 Aug 2022

  Right? It’s so ridiculous how you’re supposed to use Snap to install certbot. The (well, one of..) GitHub discussion is just beyond the pale:

  https://github.com/certbot/certbot/issues/8345#issuecomment-...

• Let’s Encrypt Receives the Levchin Prize for Real-World Cryptography
  2 projects | news.ycombinator.com | 16 May 2022

  It goes way beyond, since Let's Encrypt influence the ecosystem a lot and the standards that are used.

  If you use Let's Encrypt, you are likely using Certbot, which means that everybody uses a tool that a central authority strongly recommends to you.

  I wonder how they generate the key, for example, it may be using secp256r1: https://github.com/certbot/certbot/blob/5c111d0bd1206d864d7c...

• Setting up nginx+letsencrypt as a reverse proxy
  1 project | dev.to | 11 Apr 2022

  # nginx-ingress-https.conf events { } http { include mime.types; server { listen 443 ssl; listen [::]:443 ssl; server_name sg.horlick.me; ssl_certificate /etc/letsencrypt/live/sg.horlick.me/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/sg.horlick.me/privkey.pem; # taken from https://github.com/certbot/certbot/blob/master/certbot-nginx/certbot_nginx/_internal/tls_configs/options-ssl-nginx.conf ssl_session_cache shared:le_nginx_SSL:10m; ssl_session_timeout 1440m; ssl_session_tickets off; ssl_protocols TLSv1.2 TLSv1.3; ssl_prefer_server_ciphers off; ssl_ciphers "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384"; ssl_dhparam /etc/ssl/certs/dhparam.pem; sendfile on; tcp_nopush on; tcp_nodelay on; location / { proxy_pass http://host.docker.internal:9090/; proxy_http_version 1.1; proxy_cache_bypass $http_upgrade; proxy_set_header Host $host; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Forwarded-Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Port $server_port; } } }