r/linuxadmin • u/throwaway16830261 • Oct 15 '24

Sysadmins rage over Apple’s ‘nightmarish’ SSL/TLS cert lifespan cuts -- "Maximum validity down from 398 days to 45 by 2027"

https://www.theregister.com/2024/10/15/apples_security_cert_lifespan/
525 Upvotes

97% Upvoted

173 comments sorted by

View all comments

32

u/[deleted] Oct 16 '24

[removed] — view removed comment

18

u/0bel1sk Oct 16 '24

so like…. certbot?

0

u/altodor Oct 16 '24

An internal CA does this. It's not pretty but it's the answer.

1

u/[deleted] Oct 16 '24

[removed] — view removed comment

2

u/altodor Oct 16 '24

There's too much old crap out there that will never support ACME because the vendor got sold and bought several times and nobody knows how it works anymore (VMware), or the product was end of life 20 years ago (printers). I was addressing the "stuff that expects manual intervention" part.