Skip to content

Commit 8de2479

Browse files
committed
Certbot DNS: remove no-autorenew
We would prefer that certbot not autorenew our certificates because it does no good. Either we will get called to install the new certificate and we could renew then, or we will not, and it would be better to let the certificate fall out of issue. However, certbot's behavior on no-autorenew is pathological: it treats the existing certificate as unexpired, no matter how old it is, blocking manual attempts to renew with the certonly command. Therefore, allow autorenewals.
1 parent 253a03f commit 8de2479

File tree

1 file changed

+0
-1
lines changed

1 file changed

+0
-1
lines changed

carthage_base/pki.py

Lines changed: 0 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -311,7 +311,6 @@ async def issue_credentials(self, hostname:str, tag:str):
311311
'--cert-name', cert_name,
312312
'--dns-rfc2136',
313313
'-d', hostname,
314-
'--no-autorenew'
315314
)
316315
async with self.certbot_access() as path:
317316
key = path/cert_name/'privkey.pem'

0 commit comments

Comments
 (0)