certbot doesn't renew expired certificates on boot
Bug #2001733 reported by
Brent Baccala
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| python-certbot (Ubuntu) |
New
|
Undecided
|
Unassigned | ||
Bug Description
Ubuntu 20.05.4 LTS
certbot 0.40.0-1ubuntu0.1
The "certbot" package includes a systemd timer (called certbot) that runs a oneshot service (also called certbot) that renews any expired SSL certificates. This service runs every 12 hours.
However, this service does not run on boot. If the system has been off long enough for SSL certificates to expire, then the system will run with expired certificates for up to 12 hours until the timer fires.
In my opinion, this service, or a nearly identical oneshot service, should run on boot.
To post a comment you must log in.
