https://letsencrypt.org/2025/12/02/from-90-to-45
This change won't happen until 2027, but it's good to be already aware of this.
The Proxmox documentation states:
Automatic renewal of ACME certificates
If a node has been successfully configured with an ACME-provided certificate (either via pvenode or via the GUI), the certificate will be automatically renewed by the pve-daily-update.service. Currently, renewal will be attempted if the certificate has expired already, or will expire in the next 30 days.
This will be an issue when the lifetime goes to 45 days, because already after 15 days the renewal will happen and probably not accepted because it's not after 2/3 of the lifetime.
Is it maybe better to already shorten this to 15 days before expiring? In that case it will work with the current and future lifetime. Or even better is to look at the expiring date and do the renewal after 2/3 of the lifetime.
This change won't happen until 2027, but it's good to be already aware of this.
The Proxmox documentation states:
Automatic renewal of ACME certificates
If a node has been successfully configured with an ACME-provided certificate (either via pvenode or via the GUI), the certificate will be automatically renewed by the pve-daily-update.service. Currently, renewal will be attempted if the certificate has expired already, or will expire in the next 30 days.
This will be an issue when the lifetime goes to 45 days, because already after 15 days the renewal will happen and probably not accepted because it's not after 2/3 of the lifetime.
Is it maybe better to already shorten this to 15 days before expiring? In that case it will work with the current and future lifetime. Or even better is to look at the expiring date and do the renewal after 2/3 of the lifetime.
Last edited:
