Letsencrypt: Auto-Update certificate?

Let's Encrypt certificates are checked once per day by a Cron job and automatically renewed if they expire in less than 30 days.

Hi Ewadie

Best thanks for your helpful information. This means the correct working of this cronjob can be proofed in earliest 59 days (Then, when the first Certificates are going to expire). Hopefully your Beta will not take that long :)

Kind Regards

Christian

Hi Ewadie

Best thanks for your helpful information. This means the correct working of this cronjob can be proofed in earliest 59 days (Then, when the first Certificates are going to expire). Hopefully your Beta will not take that long :)

Kind Regards

Christian

Hi Christian,

You could always set the clock forward two months to see what happens.

Cheers - Bob

BAlfson said:

You could always set the clock forward two months to see what happens.

But be warned: Whether the outcome matches reality also depends on how Let's Encrypt behaves when you try to renew a certificate too early. I think I've seen cases where Let's Encrypt didn't issue a new certificate in this case, but simply re-sent the previously created certificate.

Also you should be aware that Let's Encrypt is protecting their service by rate limiting certain operations.

In the description is written you can use Let's Encrypt certificate on every point, but take care you don't use it on points like ssl vpn (remote / side-to-side). In this case the certificate will changed and you have deploy after every change the configuration. 

So be carefull where you use this certificates. 

We make a Howto use Lets Encrypt in 9.6 on our Blog. 

In fact, you should not use any public signed certificate for SSL RAS.

Online Help:

Server certificate: Select a local SSL certificate to be used by the SSL VPN server to identify itself against the clients.

Note –Sophos UTM does not support wildcard certificates and certificates signed by an intermedia CA in the SSL VPN.