Does this package actually acquire and renew certs?

[bsutton]

As per the title or do you need to manage that separately?

[gmpassos]

When invoking LetsEncrypt.startSecureServer with requestCertificate: true and checkCertificate: true, it triggers the acquisition of a new certificate if absent or expired. Refer to the documentation for more details. It's important to note that this process occurs solely during the server's startup.

(Indeed, there is a need for updating the documentation.)

Best regards.

[bsutton]

So is there some path that would allow preemptive renewal. I generally renew 10 days before. It would be nice to use something like the dart Cron package to do regular checks.

…

On Fri, 8 Dec 2023, 4:58 pm Graciliano Monteiro Passos, < ***@***.***> wrote: When invoking LetsEncrypt.startSecureServer with requestCertificate: true and checkCertificate: true, it triggers the acquisition of a new certificate if absent or expired. Refer to the documentation <https://pub.dev/documentation/shelf_letsencrypt/latest/shelf_letsencrypt/LetsEncrypt/startSecureServer.html> for more details. It's important to note that this process occurs solely during the server's startup. — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG32OFETP2HYOCPB56L2C3YIKUCFAVCNFSM6AAAAABAMEKHGOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNBWGU4DSMZUGY> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[gmpassos]

You can call:

https://pub.dev/documentation/shelf_letsencrypt/latest/shelf_letsencrypt/LetsEncrypt/checkCertificate.html

... with requestCertificate : true

And if it returns okRefreshed, you need to close the Server socket and re-open it.

[gmpassos]

Also see:

https://pub.dev/documentation/shelf_letsencrypt/latest/shelf_letsencrypt/LetsEncrypt/minCertificateValidityTime.html

[bsutton]

I will have a look at it. Thanks and thanks for the package.

…

On Fri, 8 Dec 2023, 6:02 pm Graciliano Monteiro Passos, < ***@***.***> wrote: You can call: https://pub.dev/documentation/shelf_letsencrypt/latest/shelf_letsencrypt/LetsEncrypt/checkCertificate.html And if it okRefreshed, you need to close the Server socket and re-open it. — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG32OBVOKQORKJZDNV5DXTYIK3O3AVCNFSM6AAAAABAMEKHGOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNBWGY2TONRQGM> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[gmpassos]

Please, let me know if it works well.

Any contributions in the form of documentation or examples would be greatly appreciated.

Best regards

[gmpassos]

...

https://onepub.dev 👍

[bsutton]

I'm not in love with a map of domains and emails being passed to startSecureServer. I'm having to dig into the example to work out what is meant to be passed. I assume its a map of domain names as the key to domainemails as the value. A list that takes a small class would make this more obvious and less error prone. I would be happy to offer up a PR with a change if its something that you would consider.

…

On Fri, Dec 8, 2023 at 7:30 PM Graciliano Monteiro Passos < ***@***.***> wrote: ... https://onepub.dev 👍 — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG32ODBWKKF4C4UI3KLCO3YILFZPAVCNFSM6AAAAABAMEKHGOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNBWG43DEMJQG4> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[gmpassos]

I will be happy to review a PR. Just make it backward compatible.

Maybe startSecureServer (with the current parameters) should call your new function, with a better definition.

[bsutton]

Missed the compatibility statement, will add another entry point.

…

On Fri, 8 Dec 2023, 8:09 pm Graciliano Monteiro Passos, < ***@***.***> wrote: I will be happy to review a PR. Just make it backward compatible. Maybe startSecureServer (with the current parameters) should call your new function, with a better definition. — Reply to this email directly, view it on GitHub <#5 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/AAG32OAX6MIMQMKKKHCIKWTYILKNNAVCNFSM6AAAAABAMEKHGOVHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMYTQNBWHAZDAMRTGQ> . You are receiving this because you authored the thread.Message ID: ***@***.***>

[bsutton]

For the moment I will leave this link here.

The handyman project demonstrates certificate renewal use a task scheduler that checks every hour if a cert needs to be renewed - renews the cert - and restarts the service with the new cert.