4 ms·
LE send you a mail if you have a cert going to expire. Easy to spot if something went wrong in your cron tasks (not that you can totally rely on automated task
by Xoros 9y ago
LE send you a mail if you have a cert going to expire. Easy to spot if something went wrong in your cron tasks (not that you can totally rely on automated task of course, but it's another layer of security)
- majewsky 9y agoBefore someone complains that LE is going to spam you with expiry notices: If you set up your process right (i.e. certbot cronjob with --keep-until-expiring), certs will be renewed early enough that the mail reminder never triggers unless there's an actual problem.
- Xoros 9y agoYes (thank you for clarifying this point for others), the first mail is sent a month before expiration, and the certs are renewable after a month. So with a weekly cron (for example) you should never get any mail from LE. That's why I meant. Thanks again.
- Vendan 9y agoIt still seems wrong to do it that way. Plus, the TLS-SNI-01 challenge is just such a clean way of handling it, no need to have a special path handling or anything. Server up and running? Then my cert is being renewed, assuming LE isn't broken at least...