[Moderator’s note: This thread is continued at Pros and cons of 90-day certificate lifetimes . If you’d like to express your support for longer certificate lifetimes, please ‘like’ (:heart:) that thread.] What will the minimum (such as if I want to explicitly request a short lifetime) and maximum li…

[image] My1: @NOYB this was sarcasm, nothing more, I cant actually mean this seriously. With the amount of nonsense on the internet I never put it passed anyone what they could actually mean seriously. Further more I don't try. I take them at what they write. It they are joking their are e…

but well I am on the side for longer certs, so there’s no way I would seirously want them to make certs that are valid for a day, well the die-hard ultra-security people could maybe make it with an option but I want to be able to make longer certs in manual mode.

[quote=“My1, post:239, topic:264”] instead of the webserver asking for a cert it might just be that a cronjob makes a new cert on the server, puts it in place and lets it restart which is far easier to make than this whole acme thing which runs with a self-updating potentially insecure/unstable cli…

well not exactly, google doesnt need any verification and google could set an access from the “CA Server” to the webserver so the “CA server” SCPs the cert into its location and restarts the webserver via SSH which is doable in less than 20 lines. to line it out: CA signs cert -> access to webserv…

[image] My1: (takes half an eternity to start this thing because it updates itself at every start) not if you run ./letsencrypt as opposed to ./letsencrypt-auto command for webroot authentication

but still the Google has it’s own CA males it a lot easier since when the CA is on a server with one-directional access to the webserver to copy files and execute commands automation is quite easy and doesnt require a large-scale software as le-auto which probably has enough failure points (one of t…

Well in real world, you make do with what you have to work with and we are no Google in terms of man power or $$$. It takes 7.8 seconds to run a cronjob to auto renew a Letsencrypt SSL certificate via webroot authentication - I timed it http://centminmod.com/letsencrypt-freessl.html#autocron …

wow, when I invoke the command in the email plus -a manual it takes MINUTES for it to start asking for sudo and again some minutes for the virtual environment ojn my raspi.

i don’t use letsencrypt-auto command for cronjob this is my webroot authentication commands in the cron file at /usr/local/nginx/conf/ssl/le11.http2ssl.xyz/letsencrypt-le11.http2ssl.xyz-cron /root/.local/share/letsencrypt/bin/letsencrypt -c /etc/letsencrypt/webroot.ini --user-agent centminmod-cento…

well for you it’s still easier, I have compatibility issues, my Win-PC with xampp aint compatible with LE, making automation useless for that one.

Maximum (and minimum) certificate lifetimes?

Issuance Policy

Topic		Replies	Views
Pros and cons of 90-day certificate lifetimes Issuance Policy	443	101515	February 6, 2017
Should LE allow for shorter and longer cert life times? Issuance Policy	30	4709	December 22, 2018
90 day expiration Feature Requests	31	1044	February 25, 2025
[Poll] Do we need longer cert validity times? Issuance Policy	49	10349	April 10, 2016
Getting Bad Vibes Uncategorized	80	23136	November 26, 2016

Maximum (and minimum) certificate lifetimes?

Related topics