News for hackers. Stuff that matters.

A comment on Get HTTPS for free. Parent comment

Re:Get HTTPS for free by ymse on Saturday January 30, 2016 @11:18PM (#11005202)
3 months expiry time was a deliberate choice to force users to automate the process. Ideally you would have a central store with a letsencrypt client, and all your actual web servers periodically fetch their certs from there.
[ Parent | on HN ]
Re:Get HTTPS for free by src on Saturday January 30, 2016 @11:49PM (#11005267)
That's great except the web server (except apache/nginx) needs to be restarted to load new certs, which isn't ideal for production. Many cloud hosting providers don't have an automated way to update certs, which makes it more tedious.
[ Parent | on HN ]
Re:Get HTTPS for free by pfg on Sunday January 31, 2016 @05:12AM (#11005915)
Both apache and nginx support graceful reloads which will reload the certificates without any downtime.
[ Parent | on HN ]