| 20 Feb 2025 |
hexa | --ari-disable Do not use the renewalInfo endpoint (draft-ietf-acme-ari) to check if a certificate should be renewed. (default: false)
| 18:07:53 |
ThinkChaos | Did they remove --ari-enable or do they have both now? 😄 | 18:08:48 |
emily | is 0 "no wait" or "indefinite"? | 20:31:12 |
hexa | no wait aiui | 20:55:07 |
hexa | yes, ari is default on now and you can disable it | 20:55:20 |
| 21 Feb 2025 |
emily |
You’ll also want to be sure your ACME client is running frequently - both for the sake of renewing short-lived certificates and so as to take advantage of ACME Renewal Information (ARI). ARI allows Let’s Encrypt to notify your client if it should renew early for some reason. ARI checks should happen at least once per day, and short-lived certificates should be renewed every two to three days, so we recommend having your client run at least once per day.
| 16:04:44 |
emily | wonder if we should consider moving to 2×/day | 16:04:52 |
emily | (https://letsencrypt.org/2025/02/20/first-short-lived-cert-issued/) | 16:04:57 |