▲ 30 ▼ TLS Certificate Lifetimes Will Officially Reduce to 47 Days (www.digicert.com) submitted 2 years ago by exu@feditown.com to c/sysadmin@lemmy.ml 10 comments fedilink hide all child comments cross-posted from: https://feditown.com/post/1233561
[–] 0p3r470r@lemm.ee 1 point 2 years ago (3 children) So would I have to buy a new cert every 47 days? permalink fedilink source hideshow 3 child comments replies: [–] Rogue@feddit.uk 0 points 2 years ago (2 children) Free certificates have existed for a long time now from providers like Let's Encrypt and ZeroSSL. permalink fedilink source parent hideshow 2 child comments replies: [–] 0p3r470r@lemm.ee 1 point 2 years ago Im aware. And I haven’t had to deal with certs in a long time. When I had to purchase them, it was typically thru godaddy. Looks like my former employer is going to have fun time. permalink fedilink source parent [–] MrPommeroy@lemmy.world 1 point 2 years ago There are still many apps that don't play nice with automated certificate replacements. I manage a few systems where the entire server needs rebooting, to work properly afterwards. One where a corresponding client-software has to be recompiled and updates distributed simultaneously with the replacement. And one where the certificate and key together needs to be uploaded manually in three different UIs. permalink fedilink source parent
[–] Rogue@feddit.uk 0 points 2 years ago (2 children) Free certificates have existed for a long time now from providers like Let's Encrypt and ZeroSSL. permalink fedilink source parent hideshow 2 child comments replies: [–] 0p3r470r@lemm.ee 1 point 2 years ago Im aware. And I haven’t had to deal with certs in a long time. When I had to purchase them, it was typically thru godaddy. Looks like my former employer is going to have fun time. permalink fedilink source parent [–] MrPommeroy@lemmy.world 1 point 2 years ago There are still many apps that don't play nice with automated certificate replacements. I manage a few systems where the entire server needs rebooting, to work properly afterwards. One where a corresponding client-software has to be recompiled and updates distributed simultaneously with the replacement. And one where the certificate and key together needs to be uploaded manually in three different UIs. permalink fedilink source parent
[–] 0p3r470r@lemm.ee 1 point 2 years ago Im aware. And I haven’t had to deal with certs in a long time. When I had to purchase them, it was typically thru godaddy. Looks like my former employer is going to have fun time. permalink fedilink source parent
[–] MrPommeroy@lemmy.world 1 point 2 years ago There are still many apps that don't play nice with automated certificate replacements. I manage a few systems where the entire server needs rebooting, to work properly afterwards. One where a corresponding client-software has to be recompiled and updates distributed simultaneously with the replacement. And one where the certificate and key together needs to be uploaded manually in three different UIs. permalink fedilink source parent