Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I don't know how old "letsencrypt-renew" is and what it does. But you run "modern" acme clients daily. The actual renewal process starts with 30 days left. So if something doesn't work it retries at least 29 times.

I haven't touched my OpenBSD (HTTP-01) acme-client in five years: acme-client -v website && rcctl reload httpd

My (DNS-01) LEGO client sometimes has DNS problems. But as I said, it will retry daily and work eventually.





> I don't know how old "letsencrypt-renew" is and what it does.

It's the five lines below "the script:"


I'm sorry mister perfect. I officiously meant "certbot".

I wasn't making fun of you. It wasn't obvious that's what you meant at all, because you said you didn't know "what it does". I'm sure you know what certbot does, so I thought you misinterpreted the post.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: