3 ms·

What would you have it do instead?

• jessaustin 10y ago
  Ideally there would be a cutover period. E.g. a month before the cert expires, attempt to renew on startup, and write a warning to log if that fails.
  • mholt 10y ago
    But what if it hasn't obtained a cert for the site before (e.g. first run)? What if the cert doesn't expire in a month -- but only, say, 7 days? 7 minutes? Where do you draw the line? Would you rather have your site go red in browsers or just not have the server start? (Remember, it wasn't started already anyway so it's not like your sites are incurring new downtime.)
    • deleted 10y ago
      [deleted]
    • jessaustin 10y ago
      Eh, the new run might be a failover, or part of an autoscaling setup, so maybe there could be some downtime? I think the default setting has to be to start anyway, although of course any particular service could be configured not to. Intentional failure seems kind of a blunt instrument?
      • toomuchtodo 10y ago
        Thanks for communicating my thoughts on this in this thread far better than I. Spot on.