Re:Let’s Encrypt in the spotlight
by Xoros on Monday July 03, 2017 @10:58PM
(#14693204)
LE send you a mail if you have a cert going to expire. Easy to spot if something went wrong in your cron tasks (not that you can totally rely on automated task of course, but it's another layer of security)
[ Parent
| on HN ]
Before someone complains that LE is going to spam you with expiry notices: If you set up your process right (i.e. certbot cronjob with --keep-until-expiring), certs will be renewed early enough that the mail reminder never triggers unless there's an actual problem.
Yes (thank you for clarifying this point for others), the first mail is sent a month before expiration, and the certs are renewable after a month.
So with a weekly cron (for example) you should never get any mail from LE. That's why I meant. Thanks again.
It still seems wrong to do it that way. Plus, the TLS-SNI-01 challenge is just such a clean way of handling it, no need to have a special path handling or anything. Server up and running? Then my cert is being renewed, assuming LE isn't broken at least...