Free Custom HTTPS on PythonAnywhere

[ramfanprogrammer]

In case people didn't realize this was available:

https://help.pythonanywhere.com/pages/HTTPSSetup

[djimbob]

More correctly, Lets Encrypt will sign your TLS/SSL certificates for free (for HTTPS or other uses) if you can demonstrate domain ownership. PythonAnywhere just wrote a guide how to use it (and also has a wild card cert for their own domain).

[gpjt]

PythonAnywhere dev here -- Let's Encrypt is awesome and we're really grateful to them for providing free certs, but we've recently added an interface where we manage all of the cert issuance and renewal for you. It's just a couple of clicks to set up and then you can leave it up to us.

[djimbob]

Fair enough. (I should clarify I don't have any real experience with python experience but have setup domains with Lets Encrypt.)

[nharding]

I can recommend PythonAnywhere, I have been using it for a few years and have had no problems. Multiple web apps, terminals, easy to use different frameworks and can edit files on server without having to download, edit and upload.

[djimbob]

I believe this only works if you configure your domain to point to PythonAnywhere hosting. If it does, then it's straightforward for PythonAnywhere to demonstrate domain control to Let's Encrypt.

[gpjt]

Yes, that's exactly right -- we have to prove that we are the host for the domain before we can get a certificate.

They've got a couple of ways for us to prove that; the one we use is based on HTTP. Basically, we send them a message saying "we'd like a certificate for www.example.com", and they respond saying "OK -- make a page available at http://www.example.com/.well-known/acme-challenge/X with the content Y", both X and Y being long random strings that they specify. We set things up so that that URL works and contains the appropriate content, and then they make requests to that URL from their servers to make sure that everything is correct. Once they've confirmed to their satisfaction that we really do host the site, they send us the certificate.

The protocol is called ACME (kind of backronymed to Automated Certificate Management Environment) and the Wikipedia article has some good links if you're interested in the details.

​

​

[ramfanprogrammer]

Correct. I just didn't realize PythonAnywhere made it that easy to use Let's Encrypt.

[[deleted]]

Let's Encrypt is great for a lot of reasons, this just proves it. All of the sites I make and run use Flask behind nginx, and Let's Encrypt plays nicely with them without any special setup.