Re: Let's Encrypt

Trond Endrestøl <[email protected]>
Newsgroups gmane.os.freebsd.security.general
Message-ID <alpine.BSF.2.21.99999.352.1909091206360.18927@enterprise.ximalas.info>
On Mon, 9 Sep 2019 16:06+0700, Victor Sudakov wrote:

> The majority is for py-certbot, so I'll probably use it. Thank you.

I have found it prudent to run certbot twice a month from cron(8), 
just to be safe.

Last year, I had one case where the certificate expired a few hours 
before the next run of certbot. Had I run certbot on the 1st and on 
the 15th day of each month, then the certificates would have been 
updated ahead of their expiration.

E.g.:

#minute	hour	mday	month	wday	who	command

52	4	1	*	*	root	certbot renew --quiet --pre-hook "service apache24 stop" --post-hook "service apache24 start"
52	1	15	*	*	root	certbot renew --quiet --pre-hook "service apache24 stop" --post-hook "service apache24 start"

-- 
Trond.
_______________________________________________
[email protected] mailing list
https://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "[email protected]"
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.