Acme.sh --issue --force vs. --renew --force

I'm not that familiar with acme.sh to know the exact difference in behaviour between --issue and --renew, but the only reason to use --force in either situations would be to update the properties of an existing certificate, e.g. adding or removing the "must staple" option or its key type.

2 Likes

Thank you

2 Likes

The only safe way to understand that difference is to go and study acme.sh source code. It's not a massively long code but it takes a while to understand where to look for what.

As for

not with acme.sh, there is no --dry-run and trying to use the staging endpoint might be unsafe if you have a production certificate (backup, backup, backup)

4 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.