search

caddyserver / certmagic

Automatic HTTPS for any Go program: fully-managed TLS certificate issuance and renewal
https://pkg.go.dev/github.com/caddyserver/certmagic?tab=doc
Apache License 2.0
5k stars 289 forks source link

Retry with new account if account disappeared remotely #269

Closed mholt closed 6 months ago

mholt commented 7 months ago

If the CA server got reinstalled or reset, retry with new account credentials.

Obviously this would be a disaster for a public CA, but it's possible that internal PKI gets reset and our client should gracefully try again.

It's a good opportunity to rotate the private key and I also found deleting the old key/reg info to be the easiest way to get CertMagic to try again with new credentials.