starred/certbot-certbot-2
1
0
Fork 0
mirror of https://github.com/certbot/certbot.git synced 2026-08-02 08:03:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

renewal: by default, use a fraction of lifetime (#10207)

Browse Source 
Previously we defaulted to renewing at 30 days before expiry, and
allowed users to customize the config file to set a different value.

Instead, we should renew when 1/3 of the lifetime is left, or for
shorter certificates (<10 days), when 1/2 of the lifetime is left.

This still allows explicitly configured values to take precedence.

---------

Co-authored-by: Will Greenberg <ifnspifn@gmail.com>
This commit is contained in:
Jacob Hoffman-Andrews
2025-03-12 10:35:59 -07:00
committed by GitHub
co-authored by Will Greenberg
parent b3bd4304f4
commit d91e552491
4 changed files with 103 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
certbot/CHANGELOG.md
+4 -1
View File
@@ -10,7 +10,10 @@ Certbot adheres to [Semantic Versioning](https://semver.org/).
### Changed
*
* Certificates now renew with 1/3rd of lifetime left (or 1/2 of lifetime left,
if the lifetime is shorter than 10 days). This is a change from a hardcoded
renewal at 30 days before expiration. The config field renew_before_expiry
still overrides this default.
### Fixed