Getting a RSA privkey from the letsencrypt generated pem

I would need a server for that right? Since it's a bucket I can only manually upload the certificate info like in the screen above. When you renew a cert do you get an all new cert and privkey?

certbot will create new privekey every renewal

5 Likes

Not necessarily.
You could use the ACME client without a web server.
When using HTTP-01 authentication, the Internet would need to reach the ACME client via TCP port 80.
When using DNS-01 authentication, the ACME client would need to have a DNS plugin that can update the DNS zone.

5 Likes

But can be instructed not to. Although I'm not sure if that only works for certbot renew, which doesn't work with --manual :roll_eyes:

5 Likes

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.