Ubuntu
python-letsencrypt package

  1. Xenial (16.04)
  2. Bug #1640978
  3. Comment #8

Comment 8 for bug 1640978

Revision history for this message
Peter Eckersley (pde-lists) wrote : Re: letsencrypt 0.4.1 contains numerous bugs fixed upstream

> Does this mean that users who currently won't get auto-renewed will
> start getting auto-renewed after this proposed update? If so, will that
> also include users who currently have expired (languishing) old
> certificates?

Yes. Each certificate (or more precisely, each lineage of certificates, where a lineage is a series of certificates that replace each other with new validity dates and possibly new domains added) gets a renewal configuration file in /etc/letsencrypt/renewal/ ; the "certbot renew" command walks through those and tries to renew any that are within 30 days of expiry. The Debian packages run that task twice a day out of the box.

I think we've concluded that we'll add a note-upon-installation telling the sys admin that that's going to start happening, and point to where it can be turned off or tweaked.