Updating letsencrypt certs

[ejheil]

I didn't see anything in the docs about this... I set up and forgot about letsencrypt a while ago; it's WebPublishing stuff on a domain and several subdomains. It got letsencrypt certs for them automatically, but I'm now getting notifications from LetsEncrypt that they'll expire soon. Do I need to do something to renew the certs narrowlink generated? If so, what? Thanks!

[SajjadPourali]

Hello, it automatically renews the certificates when they expire in 7 days or less.

narrowlink/gateway/src/service/certificate/mod.rs

Lines 105 to 127 in 48d2c8e

	pub fn renew_needed(&self) -> bool {
	for certificate in self.certificate_chain.iter() {
	let Ok((_, cert)) = X509Certificate::from_der(certificate.as_ref()) else {
	return true;
	};
	if cert.is_ca() {
	continue;
	}
	if cert
	.validity()
	.time_to_expiration()
	.and_then(|d| {
	d.unsigned_abs()
	.checked_sub(Duration::from_secs(7 * 24 * 60 * 60))
	})
	.is_none()
	{
	return true;
	}
	}
	false
	}

[ejheil]

Oh great, thank you! I'm still 19 days out from expiration, so it makes sense they haven't done anything yet.

[SajjadPourali]

You're most welcome.