chromium / badssl.com

:lock: Memorable site for testing clients against bad SSL configs.
https://badssl.com
Apache License 2.0
2.78k stars 186 forks source link

Feature request: site with certificate expiring soon #488

Open g1thub-us3r opened 2 years ago

g1thub-us3r commented 2 years ago

I'm currently testing a tool to alert me when any of the certificates that I'm responsible for are close to their expiry date. Because I'm actively working on the tool I've also gone to the effort of renewing all my certs and I have nothing to test it on! This would be a handy feature, maybe a site with a certificate that is always less than 30 days away from expiry.

milkyjoe90 commented 2 years ago

I'm also developing a tool which does similar checks against certificates, amongst other things, having a site with a cert that is reliably less than 30 days away from expiry would be incredibly useful!

christhompson commented 2 years ago

I think we could do this once we start using ACME to automatically acquire some of the certificates used (otherwise, manually doing this would be too much effort).I think most ACME CAs will let us specify a very-short-lifetime (say, 25 days) and we could just keep it renewed on a ~weekly cronjob. Adding some ACME usage is in my plans for this quarter, so I can look into this again after that is set up.