Answers.Body: <p>Yes - I'm using it on one production site and one pre-production.  One has the full letsencrypt client, but it assumes root access.  The other uses an alternative client <a href="https://github.com/diafygi/letsencrypt-nosudo">https://github.com/diafygi/letsencrypt-nosudo</a> that doesn't need root and works on shared hosting (but you may need to tweak your .htaccess file for the verification process).</p>
  
  <p>I've not needed to renew certs yet.  Although not really a problem, be aware that certs only last 3 months (though I think that's during beta).  If you have access to the webserver config, there is an auto-renewal feature but if you need to raise a support ticket on a shared hosting platform, that's less convenient.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-22T10:37:42.577Z
Answers.LastActivityDate: 2016-03-22T10:37:42.577Z
Answers.UserDisplayName: Aidan
Answers.Body: <p>I am using a hosting control panel that supports it. Sign up, certificate creation and renewal are hassle free with this panel. You only need a (virtual private) server, and a linux distribution, preferably Debian for better support. According to their comparison chart, Let's encrypt is supported both in Standard and Business edition. </p>
  
  <p>The panel is written in C, has its own web GUI as independent service and works fast with only limited resources. See for more information <a href="http://www.liveconfig.com/en/" rel="noreferrer">http://www.liveconfig.com/en/</a>  and <a href="http://www.liveconfig.com/en/editions" rel="noreferrer">http://www.liveconfig.com/en/editions</a></p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-03-22T11:10:08.783Z
Answers.LastActivityDate: 2016-03-22T11:10:08.783Z
Answers.UserDisplayName: ñull
Answers.Body: <p>Our WordPress 4.6.1 + CiviCRM 4.7.12 instance is hosted on Dreamhost. I simply added a free Let's Encrypt SSL certificate to our site from the Dreamhost cpanel, installed the "Really Simple SSL" WordPress plugin, activated, and done. Without the plugin, I was getting mixed-content warnings. Afterwards, in Chrome, the green lock displays in the address bar for every page, front-facing and back-end. The plugin also modified .htaccess to redirect https.</p>
  
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-12-17T07:33:22.350Z
Answers.Text: I would also remind to go to Administer > System Settings > Resource URLs and check Yes on "Force Secure URLs (SSL)" For some reason, one of our admins kept getting time outs accessing the backend until this was set.
Answers.UserDisplayName: Karl Rudnick
Answers.ContentLicense: CC BY-SA 3.0
Answers.CreationDate: 2016-12-16T08:43:56.620Z
Answers.LastActivityDate: 2016-12-16T08:43:56.620Z
Answers.UserDisplayName: Karl Rudnick
Body: <p><a href="https://letsencrypt.org/" rel="noreferrer">https://letsencrypt.org/</a> is a new <strong><em>free, automated</em></strong> SSL certificate issuing service that simplifies SSL certificate issuance. Despite being a new CA (Certificate Authority), the certificates are recognized by all major browsers already because they are cross-signed by IdenTrust. The project is intended to facilitate much more pervasive encryption of the Internet - <a href="https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client" rel="noreferrer">https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client</a>.</p>
  
  <p>The Electronic Frontiers Foundation and others launched the service to the public in December 2015 (<a href="https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review" rel="noreferrer">https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review</a>), and it recently issued its 1,000,000th certificate (<a href="https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client" rel="noreferrer">https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client</a>). Has anyone in the CiviCRM community started using Let's Encrypt in production despite the warning that it is only a beta (<a href="https://letsencrypt.readthedocs.org/en/latest/intro.html" rel="noreferrer">https://letsencrypt.readthedocs.org/en/latest/intro.html</a>)? Any problems or gotchas?</p>
  
Comments.ContentLicense: CC BY-SA 3.0
Comments.CreationDate: 2016-03-21T12:21:51.770Z
Comments.Text: I'm using it on a personal test server, but not in production.
Comments.UserDisplayName: DaveFF
Tags: <ssl>
Title: Has Let's Encrypt been put into production with CiviCRM?
ThreadText: # Has Let's Encrypt been put into production with CiviCRM?
  
  (Asked by: username_0 on 2016-03-20)
  
  <https://letsencrypt.org/> is a new ***free, automated*** SSL certificate issuing service that simplifies SSL certificate issuance. Despite being a new CA (Certificate Authority), the certificates are recognized by all major browsers already because they are cross-signed by IdenTrust. The project is intended to facilitate much more pervasive encryption of the Internet - <https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client>.
  
  The Electronic Frontiers Foundation and others launched the service to the public in December 2015 (<https://www.eff.org/deeplinks/2015/12/lets-encrypt-project-comes-fruition-2015-review>), and it recently issued its 1,000,000th certificate (<https://www.eff.org/deeplinks/2016/03/new-name-and-roadmap-lets-encrypt-client>). Has anyone in the CiviCRM community started using Let's Encrypt in production despite the warning that it is only a beta (<https://letsencrypt.readthedocs.org/en/latest/intro.html>)? Any problems or gotchas?
  
  **Tags:** ssl
  
  > **Comments:**
  > **username_1**: I'm using it on a personal test server, but not in production.  
  
  ---
  
  ## 3 answers
  
  ### Answer by username_2 on 2016-03-22. Score: 6
  
  Yes - I'm using it on one production site and one pre-production. One has the full letsencrypt client, but it assumes root access. The other uses an alternative client <https://github.com/diafygi/letsencrypt-nosudo> that doesn't need root and works on shared hosting (but you may need to tweak your .htaccess file for the verification process).
  
  I've not needed to renew certs yet. Although not really a problem, be aware that certs only last 3 months (though I think that's during beta). If you have access to the webserver config, there is an auto-renewal feature but if you need to raise a support ticket on a shared hosting platform, that's less convenient.
  
  
  ---
  
  ### Answer by username_3 on 2016-03-22. Score: 4
  
  I am using a hosting control panel that supports it. Sign up, certificate creation and renewal are hassle free with this panel. You only need a (virtual private) server, and a linux distribution, preferably Debian for better support. According to their comparison chart, Let's encrypt is supported both in Standard and Business edition.
  
  The panel is written in C, has its own web GUI as independent service and works fast with only limited resources. See for more information <http://www.liveconfig.com/en/> and <http://www.liveconfig.com/en/editions>
  
  
  ---
  
  ### Answer by username_4 on 2016-12-16. Score: 3
  
  Our WordPress 4.6.1 + CiviCRM 4.7.12 instance is hosted on Dreamhost. I simply added a free Let's Encrypt SSL certificate to our site from the Dreamhost cpanel, installed the "Really Simple SSL" WordPress plugin, activated, and done. Without the plugin, I was getting mixed-content warnings. Afterwards, in Chrome, the green lock displays in the address bar for every page, front-facing and back-end. The plugin also modified .htaccess to redirect https.
  
  > **Comments:**
  > **username_4**: I would also remind to go to Administer > System Settings > Resource URLs and check Yes on "Force Secure URLs (SSL)" For some reason, one of our admins kept getting time outs accessing the backend until this was set.  
  
  ---
  
  