Sysadmin

This is an automated archive.

The original was posted on /r/sysadmin by /u/borillionstar on 2024-01-19 01:02:30+00:00.

Does anyone have a recommended workflow for transitioning from manually managed certs to ACME-managed certificates?

Couple things came to mind but I don't have a huge amount of experience in the area, as previous employment experiences involved a PKI service, their own trusted root certs, or publicly trusted intermediate certs to sign their own subdomain SSL certificates.

My though would be to somehow setup or schedule the first certificate request time in a config file, etc something like 2 weeks before the manually deployed ones expire?