Custom domain SSL certificate: auto-renewal support - Mendix Forum

Custom domain SSL certificate: auto-renewal support

72

We currently host three environments on mendixcloud.com, all of which have custom domains set up with SSL/TLS certificates. It would be a great help to have the ability to automatically renew these certificates prior to expiration.

Our certs are from LetsEncrypt.org which uses their ACMEv2 API (https://letsencrypt.org/docs/client-options/) to allow for automatic domain verification and certificate renewal.  This is supported via a large number of clients as shown in the above link, although primarily for unmanaged IIS or Exchange servers.

Since mendixcloud.com is a managed host, the common ways of using these client tools are not available to us.

However, we have other custom domains pointing to managed resources in Microsoft Azure which allow custom automation scripts to update these SSL certificates.  It would be a great feature to have similar functionality built into our custom domains and sites hosted here with Mendix.

 

Thanks!

Ed

asked
8 answers

Absolutely essential with the 90 day - and possibly later 30 day - renewal period coming up.

Created

Any update on this topic?

Created

Great idea. Should be on the roadmap soon. 

Created

Great idea ;-)!!!

Created

Interesting that this same suggestion was made 5 years ago (https://forum.mendix.com/link/ideas/398), but was closed because “good idea, but we are not adding it to the roadmap yet” and then seemingly forgotten.

Created

Either providing a service similar to Certbot or allowing new certificates to be added/configured via an API would be great. Failing all that, allowing certificates to be shared between environments (we have a wildcard) would be an improvement over having to copy/paste the same certificate multiple times.

Created

Would be nice if there would be some action on this part. It is a very annoying manual process...

Created

Definitely a must! Configuring an SSL certificate manually is like the stone age 😉

Created