[ 
https://issues.apache.org/jira/browse/JAMES-3215?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17135766#comment-17135766
 ] 

David Leangen commented on JAMES-3215:
--------------------------------------

Regarding letsencrypt: the current issue that I would like to resolve is: "how 
can SSL be provided more easily, with automated udpates"?

As stated in a separate issue, SSL is not working for me, and even if it were 
working, it's a PITA to have to renew my certs every 6 weeks or so, since I 
plan to use the freely available letsencrypt (I guess I'd have to get the certs 
then install them manually, I don't yet know).

Perhaps by disabling STARTTLS and using the nginx proxy, I could get what I 
want.

> Remove SSL support in James
> ---------------------------
>
>                 Key: JAMES-3215
>                 URL: https://issues.apache.org/jira/browse/JAMES-3215
>             Project: James Server
>          Issue Type: Improvement
>            Reporter: David Leangen
>            Assignee: Ioan Eugen Stan
>            Priority: Major
>
> SSL support is not working [1], and it complicates the installation process. 
> It causes the inclusion of various libraries, and Java suuuuuucks for SSL 
> support.
> It would make James a lot simpler to remove SSL support and make SSL 
> termination somebody else's problem. These days it should be easy to use a 
> proxy (like nginx) or an ingress (for example in Kubernetes) to perform SSL 
> termination.
> It would be one less thing to maintain in James, one less thing that can go 
> wrong, one less step to take just to get a James server working, and a step 
> closer to providing good user support.
> {quote}[1] I define "working" by meaning that as a user, I follow the 
> instructions but it still does not work as intended.
> {quote}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

---------------------------------------------------------------------
To unsubscribe, e-mail: server-dev-unsubscr...@james.apache.org
For additional commands, e-mail: server-dev-h...@james.apache.org

Reply via email to