4 ms·
Privately you can always rotate at any speed or do whatever. Typically fully automated. The Q is about public certs. I never seen a fully automated cert upgrade
by AtNightWeCode 4y ago
Privately you can always rotate at any speed or do whatever. Typically fully automated. The Q is about public certs. I never seen a fully automated cert upgrade outside fully manged services.
- efortis 4y agoIt's doable with certbot[1] or using other scripts. But I don't recommend it for the reasons explained in the blog post[2] I mentioned in the first comment: [1] https://github.com/certbot/certbot https://github.com/certbot/certbot [2] https://blog.uidrafter.com/isolated-tls-certificate-creation https://blog.uidrafter.com/isolated-tls-certificate-creation
- AtNightWeCode 4y agoThanks for your input. I appreciate it. Apparently, a bit annoyed yesterday. Had to handle certs in my spare time. :) I agree about certbot. Worked with a setup that had it in a container in a cluster. Not very secure.