• abhibeckert@lemmy.world
      link
      fedilink
      English
      arrow-up
      2
      ·
      edit-2
      8 months ago

      Certbot is supposed to automatically renew certificates. It doesn’t do that reliably in my experience.

      We use it on non-critical systems and every few months I need to go in and fix things… that never happens with traditional certificates - those are setup and forget.

      As for the exact problems, I don’t think we’ve ever had the same problem twice. It’s always a once off thing but it’s still an hour of wasted time each and every time. If it happened on a proper production system it’d be a lot more than an hour, since whatever change is made would need a full gamut of testing / reporting / etc.