vTM and Let's Encrypt plan?

[cguadall]

Is there any plan to integrate https://letsencrypt.org/ and virtual Traffic manager?

[christian.treutler]

Thank you for your question.

Lets Encrypt support for the virtual Traffic Manager is considered as a candidate feature for 2017.

Best regards

Christian

[Peter Boughton]

What does "considered as a candidate feature for 2017" mean?

Google are beginning to force all sites to be HTTPS - starting this month, any page that contains a login form needs to have a valid SSL certificate (the form page itself; not just where the form submits to).

For anyone hosting a significant number of sites, this requires an automated service (i.e. Let's Encrypt), so having built-in support for this in Brocade Virtual Traffic Manager Appliance would be a huge help.

How likely is it for this to be available before the end of January?

[Baptiste Assmann]

Hi Peter,

vADC supports certificates generated by let'sencrypt, that said, it does not support yet automatic renewal.

So as long as you are able to renew certs and push it to vadc, it should be a good start.

We're working on a procedure to explain this in more details.

Baptiste

[PaulWallace]

Thanks to Baptiste Assmann for posting this article, which shows how to automate certificate renewal with Lets Encrypt:

http://community.brocade.com/t5/vADC-Blog/Using-Let-s-Encrypt-certificates-with-Brocade-vADC/ba-p/90...

[Peter Boughton]

Thanks Baptiste.

In the "Using the TEST environment variable" section, a link to the Let's Encrypt rate limits page would be worthwhile...

https://letsencrypt.org/docs/rate-limits/

[PaulWallace]

Thanks - I will raise this with Baptiste

[Baptiste Assmann]

Hi Peter,

You're absolutely right!

We're going to update the blog article and I'll also add this link into the script, so nobody could say they were not aware.

Thanks a lot for your valuable feedback!

Baptiste

[tenajsystems]

@Baptiste Assmann, when I run the script "./letsencryptforvtm.sh --issue c_example.com_rsa" Its able to request for the cert and everything is successful but I am getting the errors below:
Broken installation: missing components.
Broken installation: missing components.

As a result the cert is not uploading in the VTM catalog. What I'm I missing?

[tenajsystems]

Regarding my previous comment on the error about "Broken installation: missing components". I figured out what was causing it. I forgot to delete the brocade VTM installer after I installed VTM so the find command in the script to locate zcli was finding both the zcli from the installer and the zcli tool on the system and couldn't figureout which zcli tool to use. After I deleted the VTM installer, the error went away.