On 15 December 2020 14:56:41 CET, Stuart Henderson <s...@spacehopper.org> wrote:
>On 2020/12/15 10:18, Solene Rapenne wrote:
>> This is a small change to acme-client(1) because I find
>> the explanation of -F flag not being obvious that you
>> need it when you add/remove an alternative name in your
>> domain config.
>
>This only works directly for adding. For removal you need to rm
>the existing certificate.
-F only handles forced renewals correctly.
That it can be (ab)used to add subject alt names to a cert is an implementation
detail.
It would be nice if someone™ would fix this properly by acme-client detecting
that cert and config do not agree anymore.
--
Sent from a mobile device. Please excuse poor formating.
