Index | Thread | Search

From:
Stuart Henderson <stu@spacehopper.org>
Subject:
Re: acme-client(8): Adapt renewal calculation for shortlived certificates.
To:
tech <tech@openbsd.org>
Date:
Mon, 22 Sep 2025 15:38:51 +0100

Download raw body.

Thread
On 2025/09/16 17:31, Florian Obser wrote:
> If the lifetime is more than 10 days, renew if less than 1/3 of the
> lifetime is left. Otherwise renew after 1/2 of the remaining lifetime.

btw I just learned of https://datatracker.ietf.org/doc/rfc9773/
however proper support for this requires keeping state :(