Don't connect to acme servers if there is nothing to be done #203

New Issue

adam · 2025-12-29T01:18:52+01:00

adam commented

2025-12-29 01:18:52 +01:00

Originally created by @lukavia on GitHub (Mar 1, 2017).

If we already have account registered and have issued certificates for all domains in domains.txt, there is no need to connect to acme servers.
This will further reduce the load on the servers.

In my particular situation I install automatically on a lot of servers and the install process setup a cron on every hour for dehydrated to run.
I do this because I use DNS-01 challenge response since the servers are installed behind NAT initially and I want to have certificate ready when they are deployed.
DNS-01 is slow process since DNS servers need to be propagated and I need to verify this before asking acme servers to verify the challenge.
This is why I cannot run dehydrated in the install process itself. Further more I don't have a domain setup then just yet.

Originally created by @lukavia on GitHub (Mar 1, 2017). If we already have account registered and have issued certificates for all domains in domains.txt, there is no need to connect to acme servers. This will further reduce the load on the servers. In my particular situation I install automatically on a lot of servers and the install process setup a cron on every hour for dehydrated to run. I do this because I use DNS-01 challenge response since the servers are installed behind NAT initially and I want to have certificate ready when they are deployed. DNS-01 is slow process since DNS servers need to be propagated and I need to verify this before asking acme servers to verify the challenge. This is why I cannot run dehydrated in the install process itself. Further more I don't have a domain setup then just yet.

adam commented

2025-12-29 01:18:53 +01:00

@ghost commented on GitHub (Nov 14, 2021):

I need this feature a lot.

I am running dehydrated on my laptop, which may be off for months, so needs to check that the certificates are still valid quite often. (I do it every hour as well.) There is no reason to connect to the servers every hour, and also spam root's email when the laptop happens to be in a tunnel, or otherwise without internet connection.

@ghost commented on GitHub (Nov 14, 2021): I need this feature a lot. I am running dehydrated on my laptop, which may be off for months, so needs to check that the certificates are still valid quite often. (I do it every hour as well.) There is no reason to connect to the servers every hour, and also spam root's email when the laptop happens to be in a tunnel, or otherwise without internet connection.

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: starred/dehydrated#203