On Tue, May 02, 2023 at 11:09:59AM -0400, PGNet Dev wrote:

> what root CA expiry are you referring to?

The DST root, that issued the ISRG X1 cross cert.

> > The "ISRG Root X1" CA no longer needs a cross cert.
> 
> it seems that LE still provides them,
> 
>    https://letsencrypt.org/certificates/
> 
> need to see if the certbot/acme client has a knob to disable/remove the DST 
> cross.

>From my renewal.conf file:

    [renewalparams]
    reuse_key = True
    preferred_chain = ISRG Root X1
    ...

-- 
    Viktor.
_______________________________________________
Postfix-users mailing list -- postfix-users@postfix.org
To unsubscribe send an email to postfix-users-le...@postfix.org

Reply via email to