pulibrary / pul-it-handbook

Princeton Univ. Library Apps best practices and recommendations
BSD 3-Clause "New" or "Revised" License
10 stars 1 forks source link

TLS for CDH #328

Closed kayiwa closed 3 weeks ago

kayiwa commented 3 weeks ago

OpenBSD has an acme-client which uses the ACME protocol to contact the Letsencrypt Certificate Authority. It saves the files at

/etc/ssl and /etc/ssl/private

We use a cron job that runs at midnight and 0100 hours to contact and renew the certificates when needed.