Re: Keystore Renewal Policy?

David,

That's good info in the article.  But my question was does the 
keytool-generated file expire as well when the underlying cert 
(LetsEncrypt or self-signed cert) expires?  Or can I simply renew the 
underlying cert without having to re-execute the keytool step each time 
the cert auto-renews?

Jerry

On 5/12/2020 9:03 AM, David Matthews wrote:
> hi Jerry
>
> Not sure how helpful this is, but I mention it just in case
>
> https://dmatthews.org/java_email.html#imaps
>
> discusses imaps with james.
>
> I use a self signed cert and TBH not sure what extra LetsEncrypt offers you over that, but I produce the key with
>
> keytool -genkey -alias james -keyalg RSA
>
> and from
>
> https://letsencrypt.org/docs/integration-guide/
>
> "Let’s Encrypt accepts RSA keys from 2048 to 4096 bits in length"
>
> --
> David Matthews
> [email protected]
>
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: [email protected]
> For additional commands, e-mail: [email protected]
>