Re:Google wants to reduce lifespan for HTTPS certificates to...
by throw0101a on Sunday August 18, 2019 @07:44PM
(#20733685)
There may be systems that do not allow for it. For example, $WORK's Barracuda mail filtering system doesn't have a useful way to do it via the command line, and if you want to enter a new cert you have to copy-and-paste via the GUI.
Up until recently, F5's BIG-IP LTM didn't have an automated way to do it either, but since it's an appliance that is basically running on top of CentOS, you can SSH in and get a bash shell and run something like dehydrated (minimal dependencies):
Up until recently, F5's BIG-IP LTM didn't have an automated way to do it either, but since it's an appliance that is basically running on top of CentOS, you can SSH in and get a bash shell and run something like dehydrated (minimal dependencies):
* https://lnxgeek.org/doku.php/indexes:let_s_encrypt_-_how_to_...
There's stuff out there besides just Apache and Nginx on a Linux system, and it can't all be automated.