search

nudj / nudj-backend

Nudj - Backend (Archive)
0 stars 0 forks source link

Chat server SSL certificate auto-renewal #14

Closed richardbuckle closed 8 years ago

richardbuckle commented 8 years ago

Pascal, you mentioned that because the chat servers aren’t running Apache you had do the Let’s Encrypt verification another way. How does that affect the auto-renewal script that we run?

Let’s Encrypt certificates deliberately have a short life (3 months) and best practice is to renew them every month as our cron job on the Apache servers does.

shtukas commented 8 years ago

Doesn't affect at all. The script is just ran in --standalone mode.

The --standalone mode is actually the most natural way to run that script. The only reason the Apache mode (the one we use for the other servers) is used is because on a server that is already running Apache one would need to shut the Apache server down before running the update, which is too much trouble.

Let’s Encrypt certificates deliberately have a short life (3 months)

I know I am actually using them on another project :)

richardbuckle commented 8 years ago

Cool, thanks.