Post #2313450
2026-05-09 18:14 UTC
@cpu@hachyderm.io as the author of an acme integration, what would be a good time to renew in advance? :) I think I currently have this set to 7 days.
Also curious to learn more about ARI.
Replies (1)
-
@cpu@hachyderm.io 2026-05-09 18:55
@kpcyrd@chaos.social I think when there's a 1/3rd of the lifetime left is a good rule of thumb for when to start trying to renew. 30 days from expiry for a 90 day cert, 2 days out for a 6 day, etc. ARI is defined in https://www.rfc-editor.org/rfc/rfc9773.html We have the guts implemented in instant-acme if you want a rust reference, but it's low level and a full fledged client needs to string together the pieces.