3 ms·
Something I miss on all these howto posts about Let's Encrypt is the revocation of the old certificate on renewal. Say I have a cert that is valid until 2015-1
by y0ghur7_xxx 11y ago
Something I miss on all these howto posts about Let's Encrypt is the revocation of the old certificate on renewal.
Say I have a cert that is valid until 2015-12-31, but I want to renew it now.
./letsencrypt-auto --agree-dev-preview --server \
https://acme-v01.api.letsencrypt.org/directory certonly
will get a new certificate, but the old one, as far as I can see, is still valid and could be used for the domain until it expires.
letsencrypt-auto has a revoke function, but there is no easy way to tell it to revoke the last valid cert, or it should do it with a `renew` function.
- jand 11y agoAccoring to [1] revoking is considered an exceptional use case and will not be automatically performed on early renewal. [1] https://community.letsencrypt.org/t/maximum-and-minimum-certificate-lifetimes/264/14 https://community.letsencrypt.org/t/maximum-and-minimum-cert...