mirror of
https://github.com/dehydrated-io/dehydrated.git
synced 2026-01-13 23:23:32 +01:00
Add option to ignore extra domains in existing and valid certificates #351
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Originally created by @bzed on GitHub (May 16, 2018).
Please add an option to allow dehydrated to ignore the case when more than the configured domains are listed in an existing SAN cert while the cert is still valid.
This would help in various cases - like migrating domains to other hosts automatically while the old IP is still cached in DNS servers. You want to have some grace period before removing names from SAN certs in such cases.
@lukas2511 commented on GitHub (Dec 10, 2020):
If you ever get into this situation I'd recommend to simply not tell dehydrated to refresh those certificates for now. It would make the logic a bit harder to check for this and I don't really see much of a benefit.