Sujet : Re: 6-day TLS certificates from Let's Encrypt
De : ldo (at) *nospam* nz.invalid (Lawrence D'Oliveiro)
Groupes : comp.miscDate : 13. Dec 2024, 23:01:38
Autres entêtes
Organisation : A noiseless patient Spider
Message-ID : <vjias2$3kiac$1@dont-email.me>
References : 1 2 3 4
User-Agent : Pan/0.161 (Chasiv Yar; )
On 13 Dec 2024 18:22:25 +0000 (GMT), Theo wrote:
One of the problems with Let's Encrypt is
that you set up your server, you get a LE certificate, you set up a cron
job for renewal. And then 90 days later you find out that your cron job
didn't work for $reasons and the cert expired.
Debian provides a systemd timer definition to take care of this for you as
a standard part of its certbot package. By default the timer task runs
twice a day.
If you want to handcraft your own solution, have it run at a similar
frequency, at least to start with, to ensure it works properly. You can
also test out dummy renewals as part of that process.
6-day TLS certificates from Let's Encrypt
Re: 6-day TLS certificates from Let's Encrypt