Let's Encrypt - Renewal - port 80

[CaseyR]

Hi, Bruce

You have covered Let's Encrypt often, but I can't find the answer to this question here, in the show notes, or the docs.  My apologies if I have just missed it.

Does the insecure port have to be set to 80 for a Let's Encrypt certificate to be renewed?  If so, how do you leave it open for Let's Encrypt but closed to other traffic?

Thanks.

[Jane]

Casey,

According to the docs, it needs to be port 80:
https://www.capesoft.com/docs/NetTalk11/NetTalkWebSecure.htm#RuntimeSettings

As for closing insecure access to other traffic... take a look at (roughly) lines 86 through 114 of netweb.clw.  He's making an exception for LetsEncrypt and redirecting everything else.  Magic!

Jane

[Bruce]

As Jane says, it does what you want already (by magic <g>)

cheers
Bruce

[CaseyR]

Thanks, Jane/Bruce

I would likely have had more success finding the information if
I had used LetsEncrypt as the search term instead of Let's Encrypt.

Good to know about about the redirect for non LetsEncrypt traffic

Thanks again.