Free AlphaSSL Wildcard and regular SSLs

Saragoldfarb · July 2017

@Fidde thanks for everything. Like @MikePT said, I guess it's time to call it a day :)

caracal · July 2017

Thanks for keeping this up and everything!

Although letsencrypt.org exists, wildcard certs are still quite invaluable for some use cases. I use it for my Sandstorm.io installation, so I probably would have to scrap that if they revoke my wildcard

skizoid · July 2017

Try it today and still work

Fidde · July 2017

@skizoid said: Try it today and still work

Yeah, haven't received any reply to my message yet.

Injustsu · July 2017

Let's Encrypt will start providing wildcard certificates in Jan 2018. https://letsencrypt.org/2017/07/06/wildcard-certificates-coming-jan-2018.html

drdrake · July 2017

@Fidde said:

@skizoid said: Try it today and still work

Yeah, haven't received any reply to my message yet.

Any update? Curious to know if certs will be revoked or not.

Fidde · July 2017

@drdrake said:

@Fidde said:

@skizoid said: Try it today and still work

Yeah, haven't received any reply to my message yet.

Any update? Curious to know if certs will be revoked or not.

No, I've received a marketing email thought about backup services ;)

AnthonySmith · July 2017

They probably read your reply and thought "shit, he is not wrong!, how do we deal with this then"

Fidde · July 2017

@AnthonySmith said: They probably read your reply and thought "shit, he is not wrong!, how do we deal with this then"

;) Either that or more likely, they're updating their tos/aup :(

michaels · July 2017

Bit of a silly question, but how much would an unlimited Alpha SSL account cost? Perhaps it's something we could club together and do as a community?

rauppe31 · July 2017

@michaels said: Bit of a silly question, but how much would an unlimited Alpha SSL account cost? Perhaps it's something we could club together and do as a community?

I believe it's 20k per year or something like that

Dextronox · July 2017

@rauppe31 said:

@michaels said: Bit of a silly question, but how much would an unlimited Alpha SSL account cost? Perhaps it's something we could club together and do as a community?

I believe it's 20k per year or something like that

Alright, so who wants to go halfsies with me?

Fidde · July 2017

Got a response, looks like it catched the attention of Globalsign and that's why some of their customers got an email, I suppose some providers doing this even according to the rules got the initial email if some of their customers used the certs outside of their network.

Seems like they've indeed added information about the terms of SSL-certificates on their website now, it even got a separate icon ;) https://www.singlehop.com/legal/

I think it's time to be done with this (I don't feel like fighting both SH and GlobalSign, SH doesn't really have a choice and have been great to me until GlobalSign started complaining to them, thanks to them for making this possible for over a year) and I plan to cancel my services with SH and shut down the service in a few days time, if you want a certificate, issue one now, just go with LE, or buy one (I know this is LET and that would never happen) :P

Hello Fredrik -

My apologies for the delay in reply. I have been trying to gather additional information from our legal and support staff regarding the situation. I am not a technical person, however our billing department plays a role in many client-vendor relationships and thereby, we frequently act as liaison in these custom-like scenarios. I wanted to ensure that I was giving you the correct information in this response.

It was brought to my attention that the terms around SSLs were mistakenly left off our website in the last update we made to it earlier this year. That has been fixed and the terms for SSLs are now available on our legal page. Our resellers are free to say "unlimited free SSL certificates" to their customers, provided that those customers are actually hosted on SingleHop IP space.

Notwithstanding the above, the terms are the result of our master deal with GlobalSign. If GlobalSign feels there is the possibility of misuse or abuse of our agreement, they contact us. We have no choice but to take action and ask the customer to stop doing so in order to preserve the GlobalSign deal for all our customers.

At this time, we don't expect anything will happen with the SSLs already issued and you can leave them be until they expire. However, they cannot be renewed under the SingleHop-GlobalSign SSL deal. If you wish to renew those SSLs please contact us for pricing, and we will work with GlobalSign to discount it for you.

Let me know if you have any other questions or concerns. I appreciate your assistance.

Regards,

-- Ryan Peternell | Billing Manager

312-447-2580 | [email protected]

drdrake · July 2017

@Fidde said: Got a response, looks like it cached the attention of Globalsign and that's why some of their customers got an email, I suppose some providers doing this even according to the rules got the initial email if some of their customers used the certs outside of their network.

Seems like they've indeed added information about the terms of SSL-certificates on their website now, it even got a separate icon ;) https://www.singlehop.com/legal/

I think it's time to be done with this (I don't feel like fighting both SH and GlobalSign, SH doesn't really have a choice and have been great for me until GlobalSign started complaining to them, thanks for them for making this possible for over a year) and I plan to cancel my services with SH and shut down the service in a few days time, if you want a certificate, issue one now, just go with LE, or buy one (I know this is LET and that would never happen) :P

Hello Fredrik -

My apologies for the delay in reply. I have been trying to gather additional information from our legal and support staff regarding the situation. I am not a technical person, however our billing department plays a role in many client-vendor relationships and thereby, we frequently act as liaison in these custom-like scenarios. I wanted to ensure that I was giving you the correct information in this response.

It was brought to my attention that the terms around SSLs were mistakenly left off our website in the last update we made to it earlier this year. That has been fixed and the terms for SSLs are now available on our legal page. Our resellers are free to say "unlimited free SSL certificates" to their customers, provided that those customers are actually hosted on SingleHop IP space.

Notwithstanding the above, the terms are the result of our master deal with GlobalSign. If GlobalSign feels there is the possibility of misuse or abuse of our agreement, they contact us. We have no choice but to take action and ask the customer to stop doing so in order to preserve the GlobalSign deal for all our customers.

At this time, we don't expect anything will happen with the SSLs already issued and you can leave them be until they expire. However, they cannot be renewed under the SingleHop-GlobalSign SSL deal. If you wish to renew those SSLs please contact us for pricing, and we will work with GlobalSign to discount it for you.

Let me know if you have any other questions or concerns. I appreciate your assistance.

Regards,

-- Ryan Peternell | Billing Manager

312-447-2580 | [email protected]

Thank you for your contribution to this community! I am sure this has helped a lot of users!

Edmond · July 2017

@Fidde Thanks for offering the certificates for the community! Really happy with mine. :)

My certificate expires next March, so it works out, Let's Encrypt issues wildcard certificates in January already. Lets just hope they don't revoke my certificate before it expires, seems to be working for me.

Ehh... time to issue another certificate covering everything before the service ends... D:

Fidde · July 2017

[email protected]:~# shutdown 0
Shutdown scheduled for Mon 2017-07-17 10:39:37 CEST, use 'shutdown -c' to cancel.
[email protected]:~# Connection to assl.loovit.com closed by remote host.
Connection to assl.loovit.com closed.

I'll upload the latest version of this along with the nginx-conf on Github when I have the time, I'll probably just create another branch in this repo:

https://github.com/Vittfarne/ASSL

Thanks to everyone that helped, especially @akb for the script, and everyone who translated.

When your certificate is up for renewal, I suggest Let's Encrypt or if hosted on a cPanel server, AutoSSL.

If you haven't read this thread and wondering why this ended, read from link below until this post.

https://www.lowendtalk.com/discussion/comment/2282467/#Comment_2282467

If you got redirected from assl.loovit.com/net or some other site, this is where it all started and you should join the community for more stuffs like this:

https://www.lowendtalk.com/entry/register

Summer is over for this project :P

sundaymouse · July 2017

Thank you @Fidde, it has been immensely useful while it lasted.

Edmond · July 2017

@Fidde said:

[email protected]:~# shutdown 0
> Shutdown scheduled for Mon 2017-07-17 10:39:37 CEST, use 'shutdown -c' to cancel.
> [email protected]:~# Connection to assl.loovit.com closed by remote host.
> Connection to assl.loovit.com closed.
>

I'll upload the latest version of this along with the nginx-conf on Github when I have the time, I'll probably just create another branch in this repo:

https://github.com/Vittfarne/ASSL

Thanks to everyone that helped, especially @akb for the script, and everyone who translated.

When your certificate is up for renewal, I suggest Let's Encrypt or if hosted on a cPanel server, AutoSSL.

If you haven't read this thread and wondering why this ended, read from link below until this post.

https://www.lowendtalk.com/discussion/comment/2282467/#Comment_2282467

If you got redirected from assl.loovit.com/net or some other site, this is where it all started and you should join the community for more stuffs like this:

https://www.lowendtalk.com/entry/register

Summer is over for this project :P

Thanks a lot for what you done. :D

For all the people who's going to renew their certificate a year from now. Let's Encrypt will already have wildcard certificates so it's really easy to get the same thing, just issued from a different CA.

HooLan · July 2017

Thank you!It is so pity that the project Loovit.net closed!

MikePT · July 2017

@Fidde said:

[email protected]:~# shutdown 0
> Shutdown scheduled for Mon 2017-07-17 10:39:37 CEST, use 'shutdown -c' to cancel.
> [email protected]:~# Connection to assl.loovit.com closed by remote host.
> Connection to assl.loovit.com closed.
>

I'll upload the latest version of this along with the nginx-conf on Github when I have the time, I'll probably just create another branch in this repo:

https://github.com/Vittfarne/ASSL

Thanks to everyone that helped, especially @akb for the script, and everyone who translated.

When your certificate is up for renewal, I suggest Let's Encrypt or if hosted on a cPanel server, AutoSSL.

If you haven't read this thread and wondering why this ended, read from link below until this post.

https://www.lowendtalk.com/discussion/comment/2282467/#Comment_2282467

If you got redirected from assl.loovit.com/net or some other site, this is where it all started and you should join the community for more stuffs like this:

https://www.lowendtalk.com/entry/register

Summer is over for this project :P

Farewell Assl!

khalequzzaman17 · July 2017

The script doesn't works perfectly.

Tom · July 2017

@khalequzzaman17 said: The script doesn't works perfectly.

...read the thread

yokowasis · July 2017

What happened to hosting that resell your alphassl?

justin4869 · July 2017

Cried out loud for shutting down the project Maybe there were just too many free riders that don't understand the value. Had a good time, thanks and hope we could somehow help.

Maybe we could do some restrictions next time, such as veteran lowendtalkers only?

WSS · July 2017

It's unlikely to happen again. With LE taking over, and soon to offer wildcards, well- that's pretty much where it'll go for people too cheap to pay for a cert.

Fidde · July 2017

@yokowasis said: What happened to hosting that resell your alphassl?

If you are talking about subaccounts from my account, they are simply gone, but all existing certs will most likely still work as stated by SH.

@justin4869 said: Cried out loud for shutting down the project Maybe there were just too many free riders that don't understand the value. Had a good time, thanks and hope we could somehow help.

Maybe we could do some restrictions next time, such as veteran lowendtalkers only?

If anyone is interested in starting a "sequel" it's as simple as signing up with SH with their Shield Plus service and running the script from Github. Then you can modify it as you need and add protection (password or whatnot). You can ask for help, etc, but I won't actively get involved.

@WSS said: It's unlikely to happen again. With LE taking over, and soon to offer wildcards, well- that's pretty much where it'll go for people too cheap to pay for a cert.

^This

justin4869 · July 2017

We'd like to, but such B2B sites usually come with stunning price...

What's the pricing for minimal services that include the Shield Plus services?

HackedServer · July 2017

Fidde said: signing up with SH with their Shield Plus service

How much would this run someone at the cheapest? Looks like $40/m for a Cloud VPS is the cheaptest option, how much is Shield Plus?

drdrake · July 2017

Is it 100% confirmed that previous ssl certs will not be revoked?

Shade · July 2017

drdrake said: Is it 100% confirmed that previous ssl certs will not be revoked?

No

VirtualByte · August 2017

Mine got revoked today :( (only not working on android chrome, desktop still fine) Rip wildcard, welcome acme.

sibaper · August 2017

VirtualByte said: Mine got revoked today :( (only not working on android chrome, desktop still fine) Rip wildcard, welcome acme.

how do you know it revoked? if your domain is private, can you share screenshot,

doghouch · August 2017

@sibaper said: VirtualByte said: Mine got revoked today :( (only not working on android chrome, desktop still fine) Rip wildcard, welcome acme.

how do you know it revoked? if your domain is private, can you share screenshot,

Well, 1) it gets listed, and 2) the checker you're using [SSLLabs] will say it. In this case, your certificate shows up as "Not Revoked." Evidently enough, it'll say the opposite when it is removed/revoked.

rm_ · August 2017

doghouch said: Well, 1) it gets listed, and 2) the checker you're using

Pretty sure he knows how to check for that, and the question was why @VirtualByte thinks their got revoked. "Doesn't work on Android" is not enough, or at least what is the error message.
Maybe it's simply misconfigured (incomplete chain) and never worked on Android in the first place.

VirtualByte · August 2017

Sslabs says it isn't revoked, so might be a weird android BSD SSL server issue. Weird

sibaper · August 2017

VirtualByte said: Sslabs says it isn't revoked, so might be a weird android BSD SSL server issue. Weird

misconfiguration from your part.

Fidde · August 2017

@HackedServer said:

Fidde said: signing up with SH with their Shield Plus service

How much would this run someone at the cheapest? Looks like $40/m for a Cloud VPS is the cheaptest option, how much is Shield Plus?

If you choose to have the VPS billed hourly and have it powered off, it's cheaper. I payed about $3-7/month for the VPS and then $30/month for Shield Plus.

HackedServer · August 2017

Fidde said: $30/month for Shield Plus.

Is Shield Plus what allows SSL certs, or does it just allow an unlimited amount?

Fidde · August 2017

@HackedServer said:

Is Shield Plus what allows SSL certs, or does it just allow an unlimited amount?

As I understand, it's what makes them free. Otherwise, you probably have to pay for certs, but I'm not sure. I'd suggest chatting with them to find out :)

sanvit · August 2017

@Fidde Hey, does SH SSL support multi-domain SSL or just single domain + wildcard? And does it support certs valid for more than an year? Thanks!

Foul · August 2017

I can create ssl's with my hourly billing vm from singlehop.

hotsnow · August 2017

@Fidde said: If you choose to have the VPS billed hourly and have it powered off, it's cheaper. I payed about $3-7/month for the VPS

according the "Rate Turned Off $0.0103/hr", it seems at least $7/month if you select always turned off?

MikePT · August 2017

@Foul said: I can create ssl's with my hourly billing vm from singlehop.

Without shield? For free?

AlanDS · August 2017

Is anybody with SH account is kind enough to issue me a free wildcart cert?? Please send me a PM or reply here. I will send you CSR.

Thanks

doghouch · August 2017

@AlanDS said: Is anybody with SH account is kind enough to issue me a free wildcart cert?? Please send me a PM or reply here. I will send you CSR.

Thanks

Is it that bad that you need it free?

WSS · August 2017

Can this thread be put to bed- assuming @Fidde 's blessing, of course?

AlanDS · August 2017

@doghouch said: Is it that bad that you need it free?

I need wildcard... Do you know any service which offers wildcards for free at the moment?

doghouch · August 2017

@AlanDS said:

@doghouch said: Is it that bad that you need it free?

I need wildcard... Do you know any service which offers wildcards for free at the moment?

You still haven't answered my question. Anyway, @vmbox has them included with their servers.

WSS · August 2017

@AlanDS Yes, send a really nice letter to Comodo on letterhead made up in Photoshop. MS Comic Sans is a great place to start for official documents.

Dumbledore · August 2017

Send me the CSR (Active Members only)

Howdy, Stranger!

Categories

In this Discussion

Free AlphaSSL Wildcard and regular SSLs

Comments