Re:Automate Public Certificates Lifecycle Management via RFC...
by tehbeard on Tuesday April 12, 2022 @03:54AM
(#30999797)
Is this with provisioning many new certs?
The recommended renewal cycle gives you a 30 day lead on failure becoming a problem, plenty of time for multiple retries or recovery processes to use an alternate.
The only issues I've ran into, have stemmed from DNS for wildcard certs, where a client's DNS provider is... pretty crap about updating records despite low ttls being set.
Re:Automate Public Certificates Lifecycle Management via RFC...
by minerva23 on Tuesday April 12, 2022 @10:22AM
(#31003133)
It’s a web hosting business. New customers want effortless free TLS asap. We get customers who routinely create new sites who come to expect fast provisioning.
The recommended renewal cycle gives you a 30 day lead on failure becoming a problem, plenty of time for multiple retries or recovery processes to use an alternate.
The only issues I've ran into, have stemmed from DNS for wildcard certs, where a client's DNS provider is... pretty crap about updating records despite low ttls being set.