Public Suffix List update schedule?

Issuance Policy
1

Hello,
does someone know when the next PSL (https://publicsuffix.org/) Pull will be done?
As some of my Domains have been added to the PSL and I need to know when I can start issuing Certs for those Domains without running into Rate Limiting issues …
thx
Andreas Schnederle-Wagner

2

Hi @futureweb,

Boulder doesn’t consume the PSL directly, instead we use the publicsuffix-go library which itself updates the PSL via frequent auto-pulls. Given that, I think your question is best expressed “What is Boulder’s publicsuffix-go update schedule?”.

Right now the answer is that we do it on an adhoc-basis. I will typically cut a pull request to update the dependency if someone asks :slight_smile: The last time I did so was 16 days ago - perhaps that included the domains you’re interested in? I can verify if you’re willing to provide a list.

(Note: as always there is delay between when something is merged to master and when it appears in staging & production. You should follow https://letsencrypt.status.io/ for deploy status & changelogs).

Thanks!

3

Hi @cpu,

thank you for clarification! :wink:

My Pull was merged 14 Hours ago - so I suspect it’s already included in your last Pull.
But my Changes have already been pulled into publicsuffix-go a few hours ago.

May I ask you if you could start a pull again? :slight_smile:

As for staging / production - as a rule of thumb - do we speak about days / weeks or months?

Thank you, bye from Austria
Andreas

4

Here you go: Updates publicsuffix-go to +cd40c0. by cpu · Pull Request #2243 · letsencrypt/boulder · GitHub

Generally weeks not months. Staging is updated on Tuesdays, Production on Thursdays. For this PR if it were to be merged before Monday to make this week's staging release it would likely go into production on Thursday, Oct 20th - but that's not a guarantee :slight_smile: We occasionally have reason to hold back staging/production releases (e.g. last week's production update).

Thanks for your patience!

1 Like
5

@cpu - waiting 4 months to get my Domains into PSL required patience - the Numbers you are calling are a pleasure to hear! :wink:
Thx for you incredible fast help on this Topci! :wink:

Bye from Austria
Andreas

1 Like
6

Hi again @futureweb, hope you’re doing well.

Good news: as of today’s update your PSL entries should be in place for both staging & production.

7

@cpu - it’s working like a charm - already modified our SSL-Generator-Script to issue Certs for our Customer Domains! :wink:
Thx again for your excellent help on this! :slight_smile:

1 Like
8

Glad to hear it! Always happy to help :slight_smile:

9

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.