3 ms·
I've dealt with expired ssl certs on api servers run by school districts and no, they don't automate this stuff, neither do i for my own servers, shamefully.
by TomK32 8y ago
I've dealt with expired ssl certs on api servers run by school districts and no, they don't automate this stuff, neither do i for my own servers, shamefully.
- lowercased 8y agoi did some work for my state, and I couldn't automate ssl stuff, because the dept who handled the certs didn't provide for automation to be consumed - I got emailed certs (IIRC - been a couple of years now). By contrast, for most projects, I have standard cert/le automatically updating every 2-3 months. LE was just becoming a thing a couple years ago, and they'd never heard of it. I'm not saying they should all use LE, but the initial time investment of providing an automated process to renew and update via API would pay dividends in the long run (but the people that feel that the most don't have the clout/power to lobby for such things, usually).
- theartfuldodger 8y agoI work with many large health and insurance companies, although we recommend that this be automated and are fully capable, internal IT staff at the companies seem to need to complicate the matter for job security and require they are involved although we do all the certain, often they are delayed in action due to either incompetence or other job duties. Not surprising to me to see this is the case for local and federal govt too.