Will Certbot ever update Apache SSL settings on renew?

[kkirbatski]

Hello,

I have a server that runs certbot renew every couple of days or so via a cronjob. My question is this, will certbot renew ever change the enabled TLS versions configured in Apache?

Thanks,
Kyle

[_az]

It depends.

If you used the--apache installer in Certbot, then Certbot will have installed a file at /etc/letsencrypt/options-ssl-apache.conf which controls the enabled TLS versions.

If you leave that file alone, Certbot will automatically update it over time.

If you modify the file, then Certbot will avoid overwriting your changes. In this case, it will be your responsibility to keep it up to date.