Let's encrypt - SSL certificate

mjr

Hello!

Is "let's encrypt" SSL certificate support planned on the USG40 (and higher)?
With which version is this activated?

BR, MJR

zyman2008

You always can import certificate/private key with pkcs12 format into the USG, not just let's encrypt.

mjr

I know that you can import certificates.

For some customers it is interessting to be able to use "lets encrypt" certificates.
Other devices, such as NAS from QNAP, are already prepared for this.

zyman2008

I did import let's encrypt certificate on my USG110 for device GUI management.
And it works.

mjr

Hi zyman2008!
How long is the certificate valid? Is the renewal process automatically done or do you have to manually update the certificate?

BR; mjr

zyman2008

I'm using certbot on my raspberry Pi behind the USG to auto renew the certificate from let's encrypt.
Of course, I need manual import the renewal certificate into my USG through the GUI.
Since it's just take less than 5 mins. every 3 months, so that not a problem, for me.

If USG can support import certificate via FTP service. Than I can automation all the process.

mjr

I think it would be a very helpful feature if the zywall could handle let's encrypt certificated automatically, without any user interaction. -> FEATURE REQUEST

Zyxel_Charlie

@mjr
The request " USG Series could handle let's encrypt certificated automatically", I would like to move your request to the ideas section."
Charlie

Dustin

I am just posting to register my vote in favor of adding inbuilt Let's Encrypt functionality.  Registered the account on the forum to do so.

nohona

Did anyone figure out how to import Let's Encrypt generated certs? Could not get it to work with these instructions. Does the key.pem need to be coverted to a pkcs12?

Combining key and certificate into a pkcs12

PKCS#12 incorrect password error #84

zyman2008

I only pack the certificate and private key into PKCS12 file.
# openssl pkcs12 -export -out myusg.p12 -inkey private.key -in certificate.crt

Then import root & intermediate certificate into Trusted Certificated in USG.
And import PKCS12 file into My Certificated in USG. (you need to provide the password of p12 file

That's it.