Date: Thu, 10 Sep 2020 22:21:30 +0000 From: "Daniel Lysfjord" <lysfjord.daniel@smokepit.net> To: freebsd-questions@freebsd.org Subject: Re: py37-certbot question Message-ID: <e427f06d794c8bb1fa66e416e09da196@smokepit.net> In-Reply-To: <f3481d62-9c16-4740-f1b1-c808beb5998c@kicp.uchicago.edu> References: <f3481d62-9c16-4740-f1b1-c808beb5998c@kicp.uchicago.edu>
next in thread | previous in thread | raw e-mail | index | archive | help
"Valeri Galtsev" <galtsev@kicp.uchicago.edu> skrev 10. september 2020 kl.= 23:48:=0A=0A> Dear Experts,=0A> =0A> I hope, someone knows details of py= thon3 based certbot. Namely, if run with "update" command, it=0A> updated= certificates that will expire "soon". How soon, it doesn't say in man pa= ge, just soon. Does=0A> someone know how close to expiration cert should = be to be considered by the script for renewal.=0A=0Ahttps://certbot.eff.o= rg/docs/using.html#renewing-certificates=0ATells me 30 days:)=0A=0A=0A> = =0A> I use certbot since its python 2 version - for quite some time actua= lly to renew LetsEncrypt=0A> certificates. With python2 version in the pa= st I run cron job daily and I was restarting apache=0A> from that same sc= ript if certificate was updated. With python3 version when I switched to = it I=0A> followed somebody's HOWTO, and just added to /etc/periodic.conf:= =0A> =0A> weekly_certbot_enable=3D"YES"=0A> weekly_certbot_service=3D"apa= che24"=0A> =0A> And was living happily ever since. However, one of the ma= chines is about 4 days before expiration,=0A> Letsencrypt sent me notific= ation: update cert. I checked, and crond is runnning, /etc/periodic.conf= =0A> is as expected, and now, 4 days before expiration script (with --dry= run flag) indeed goes about=0A> renewing the cert. There is one weekly c= ron jobs set that will happen before actual expiration of=0A> my certs, s= o I somehow think all is OK and my cert will be renewed.=0A> =0A> But I a= m just curios how many days before expiration certbot does renew certific= ate that will=0A> expire "soon".=0A> =0A> Or should I probably switch it = over to daily cron job?=0A> =0A> As every lazy sysadmin, I do prefer to s= et things up so they definitely work without my attention.=0A> And I do n= ot want to be reminded to do something it it will still happen on its own= . So, switch to=0A> daily cron job?=0A> =0A> Thanks.=0A> Valeri=0A> =0A> = -- ++++++++++++++++++++++++++++++++++++++++=0A> Valeri Galtsev=0A> Sr Sys= tem Administrator=0A> Department of Astronomy and Astrophysics=0A> Kavli = Institute for Cosmological Physics=0A> University of Chicago=0A> Phone: 7= 73-702-4247=0A> ++++++++++++++++++++++++++++++++++++++++=0A> ____________= ___________________________________=0A> freebsd-questions@freebsd.org mai= ling list=0A> https://lists.freebsd.org/mailman/listinfo/freebsd-question= s=0A> To unsubscribe, send any mail to "freebsd-questions-unsubscribe@fre= ebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?e427f06d794c8bb1fa66e416e09da196>