Free SSL

12-02-2018, 03:40 PM

crappkid Wrote: For those not liking the 3 month duration, just create a cron job to update it automatically.

Yep, exactly... the 3 month thing is a non-issue despite how often I hear people bring it up... LetsEncrypt and certbot have made this process extremely simple... regardless of how many certificates you've got on your server, it's as simple as running "letsencrypt renew" or "certbot renew" to automatically renew all of your previously obtained certificates that expire soon (within the next 30 days I believe) and they get set back to 90.. it refreshes the web server for you too. Just create a simple cron job to run weekly (or even daily) and your certificates will NEVER expire with no action required on your part, even if you obtain new certificates.

I have a cron job to run "/usr/bin/letsencrypt renew >> /var/log/le-renew.log" once a week, and each week the log gets added with something like this:



Long story short, the 3 month expiry shouldn't factor into the decision of whether or not to use LE.