Re: SSL termination for private domains


Carlo Alberto Ferraris
 

Yes, it's the protocol[1] proposed by ISRG letsencrypt[2] (under the linux foundation umbrella) that allows automated generation and PKI signing of TLS certificates.
For the record, there's a go implementation of the acme protocol that may end up in the standard library sooner or later[3].

[1]: https://tools.ietf.org/html/draft-ietf-acme-acme-03
[2]: https://letsencrypt.org/
[3]: https://godoc.org/golang.org/x/crypto/acme

Join {cf-dev@lists.cloudfoundry.org to automatically receive all group messages.