Adopt letsencrypt certs for https?

[cboettig]

@sckott and I were just discussing this so I thought I'd open an issue as a placeholder for the suggestion. Looks like our current COMODO https certificate has expired, which might be a good time to move to a letsencrypt certificate. Caddy server issues and renews these automatically, Scott and I have been using this for rfishbase (https://rfishbase.ropensci.org now uses a Letsencrypt certificate from Caddy instead of the COMODO one, note it's cert is still valid since it's automatically renewed). Should be pretty straight forward to set up for https://ropensci.org too?

[karthik]

Just an update. I already purchased a renewal for the certificate before I left on my trip. It just needs to be installed.

[karthik]

The certificate was due to expire the day of my return (March 21) and that's what happened. I don't know much about letsencrypt but if that's better, it's fine with me to switch. This one is already paid for and activated, I didn't have time to complete the installation before leaving.

[cboettig]

Cool, thanks for the update. in that case it's probably best to just drop in the new cert for the time being and we can switch next time it expires (I assume it's a one-year term?)

letsencrypt certs expire every 90 days, which is a more of a pain. If we use caddy server to host it does the renewal automatically, so no pain at all, but we would need to move from apache httpd server or whatever to caddy (should be simple if we have root, caddy is so much easier to use than apache and nginx: https://caddyserver.com)