LetsEncrypt Certificate Renewal

[GordonF]

My first few sites to use my webserver application went live mid May and I have a question about LetsEncrypt.

Am I correct in thinking a webserver app will auto renew the LetsEncrypt certificate so long as port 80 and port 443 are open or do I need to include code to renew periodically?

Also if it is automatic how frequently or how long before it expires does it get renewed?

Does it make any difference if the webserver is running as a service?

Any clarification will be appreciated.

Gordon

[DonRidley]

https://www.capesoft.com/docs/NetTalk12/NetTalkWebSecure.htm#LetsEncrypt

Automatically 30 days before expiration.

No special code needed.

Ports 80 and 443. 

[GordonF]

Thank you for replying, I'll watch the first few to ensure they renew but it's good to know it is automatic.

[osquiabro]

DonRidley, my certificate don't renew automatic when run as service, my service have a local account with administrator privileges, does need any special setting?

[Richard I]

Yes,  I too would appreciate knowing whether certificates are or can be updated if the app is running as a service.
Thanks
Richard

[DonnEdwards]

The certificates update every 30 days if you are running the NT Server app as an application. I ran the server app for 5 months with no need to manually update the certificates.

I changed the properties of the .exe to run only one copy, and then created a scheduled task than ran on login (that was set to automatic using netplwiz) as well as every 30 minutes. Just make sure that you set it to not run if an instance is already running. As long as the app doesn't generate any GPF messages, you should be fine, even when Windows Update requires a reboot.

[Bruce]

>> Yes,  I too would appreciate knowing whether certificates are or can be updated if the app is running as a service.

should work as a service, yes.

Cheers
Bruce

[osquiabro]

Bruce, my certificate don't renew automatic when run as service, my service have a local account with administrator privileges, does need any special setting?

[Bruce]

no, I don't think it needs any special setting.
I'll try it here to see if it works as a service, but I've not had any reports of it not working as a service so far.

[osquiabro]

I am reporting it, I have two clients that the renewal as a service has never worked, I have to renew it without the service

[osquiabro]

well today a problem occurred when running as a service the certificate is not renewed, I just renew without as a service, any ideas to solve this problem, my service was created as administrator and has its own account as administrator

[GordonF]

Hi,

Was this clarified can a webserver run as a service and renew the certificate, I'd like to run my webserver as a service on client machines.

Best Regards
Gordon