dehydrated icon indicating copy to clipboard operation
dehydrated copied to clipboard

Don't connect to acme servers if there is nothing to be done

Open lukavia opened this issue 7 years ago • 1 comments

If we already have account registered and have issued certificates for all domains in domains.txt, there is no need to connect to acme servers. This will further reduce the load on the servers.

In my particular situation I install automatically on a lot of servers and the install process setup a cron on every hour for dehydrated to run. I do this because I use DNS-01 challenge response since the servers are installed behind NAT initially and I want to have certificate ready when they are deployed. DNS-01 is slow process since DNS servers need to be propagated and I need to verify this before asking acme servers to verify the challenge. This is why I cannot run dehydrated in the install process itself. Further more I don't have a domain setup then just yet.

lukavia avatar Mar 01 '17 09:03 lukavia

I need this feature a lot.

I am running dehydrated on my laptop, which may be off for months, so needs to check that the certificates are still valid quite often. (I do it every hour as well.) There is no reason to connect to the servers every hour, and also spam root's email when the laptop happens to be in a tunnel, or otherwise without internet connection.

ghost avatar Nov 14 '21 05:11 ghost