Hi Clément, On Tue, Jan 30 2024, Clément Lassieur wrote:
> Carlo's solution allows to have a working nginx even when certbot > fails. I just upgraded a server to the latest Guix version, which I think includes a version of this patch. To my surprise OpenSSL, which I saw in proced, generated a lot of certificates in /etc/certs. I am talking about pages and pages of asterisk, plusses, and dots for a system with twenty or so certificates. Is it possible that they were generated as a result of the patch? It would be unfavorable to create such certificates when they are not needed. It reduces valuable server entropy. Kind regards Felix