dehydrated-io / dehydrated

letsencrypt/acme client implemented as a shell-script – just add water
https://dehydrated.io
MIT License
5.96k stars 716 forks source link

Add a check for a change of key between CSR and existing cert. #926

Open wteiken opened 9 months ago

wteiken commented 9 months ago

When the pubkey in the CSR changes compared to the current cert then the cert needs to be renewed, similar to a change in alt names.