2 ms·
I would love to hear more about your issue though. I have deployed LE in situations where I needed wildcard certs and didn't have access to the DNS server to se
by remram 3y ago
I would love to hear more about your issue though. I have deployed LE in situations where I needed wildcard certs and didn't have access to the DNS server to set the challenge (literally a separate network) successfully. I have deployed it in situations where the DNS server doesn't even have an API at all.
I won't claim that it is always easy, but I really can't object to the short lifetime. I agree that the goal should be to automate this. After all, domain registrations aren't forever, you shouldn't be able to hold on to certificates to someone else's domain.
- JohnFen 3y agoI'm certainly not saying I have a situation where it's impossible to do automation. Just that it's sometimes not feasible, in that it takes too much effort and introduces more points of potential failure. In other words, that it's more complex than just buying a cert with a longer lifetime and using that. In my case, it's not a DNS issue but one of the systems themselves not having enough available resources to put the automation on, which means that I'd have to do the automation on another machine and either set up some sort of automated method of moving the certs to their ultimate destination or manually install them. > domain registrations aren't forever Technically true, but practically? The youngest domain name I have, I've had for over a decade. Most of my domain names are much older. They are, for all intents and purposes, permanent.