Page MenuHomePhabricator

acme-chief should be able to refresh OCSP stapling response even if the renewal process fails
Open, MediumPublic

Description

As seen on T243948, currently acme-chief won't refresh the OCSP stapling response if for any reason it's unable to renew the certificate. Taking into account that a cert lives up to 3 months and OCSP responses only 1 week, acme-chief needs to renew them even if the renewal process is failing

Event Timeline

The swap of Traffic for Traffic-Icebox in this ticket's set of tags was based on a bulk action for all such tickets that haven't been updated in 6 months or more. This does not imply any human judgement about the validity or importance of the task, and is simply the first step in a larger task cleanup effort. Further manual triage and/or requests for updates will happen this month for all such tickets. For more detail, have a look at the extended explanation on the main page of Traffic-Icebox . Thank you!