Re: a question about certificates from letsencrypt

2016-08-22 Thread Andrew McGlashan
Hi Andreas, On 19/08/2016 10:11 PM, Andreas Meyer wrote: > Hello! > > Certificates from letsencrypt are renewed every three months. > > Does that mean a MUA has to accept the renewed certificates manually > everytime it is renewed? No, if the certificate is not a self-signed one, and if the MUA

Re: a question about certificates from letsencrypt

2016-08-19 Thread Adrian Minta
On 08/19/2016 04:30 PM, Sven Strickroth wrote: Am 19.08.2016 um 14:40 schrieb Adrian Minta: The cert doesn't work with old clients. What do you understand under old? Ok, Windows XP clients might be problematic regarding SNI and used ciphers, but starting with Vista all clients which use the W

Re: a question about certificates from letsencrypt

2016-08-19 Thread Sven Strickroth
Hi, On 08/19/2016 03:11 PM, Andreas Meyer wrote: > Certificates from letsencrypt are renewed every three months. I'm using a Let's Encrypt certificate w/o problems for > 6 months now (three times renewed) for web, SMTP and IMAP. As I'm also using DANE I wrote my own script for also updating the T

Re: a question about certificates from letsencrypt

2016-08-19 Thread Ralph Seichter
On 19.08.2016 14:12, Aki Tuomi wrote: > Depends how your MUA validates the certificate. > > If it just checks CA, then no. Also I don't think the private key > changes, so it should not cause recheck either. Other checks, maybe. Last time I checked, the LetsEncrypt client generated a fresh key pa

Re: a question about certificates from letsencrypt

2016-08-19 Thread Adrian Minta
The cert doesn't work with old clients. On 08/19/2016 03:11 PM, Andreas Meyer wrote: Hello! Certificates from letsencrypt are renewed every three months. Does that mean a MUA has to accept the renewed certificates manually everytime it is renewed? Sorry if this is OT! Greetings Andreas

Re: a question about certificates from letsencrypt

2016-08-19 Thread Aki Tuomi
On 19.08.2016 15:11, Andreas Meyer wrote: > Hello! > > Certificates from letsencrypt are renewed every three months. > > Does that mean a MUA has to accept the renewed certificates manually > everytime it is renewed? > > Sorry if this is OT! > > Greetings > > Andreas Depends how your MUA valida

a question about certificates from letsencrypt

2016-08-19 Thread Andreas Meyer
Hello! Certificates from letsencrypt are renewed every three months. Does that mean a MUA has to accept the renewed certificates manually everytime it is renewed? Sorry if this is OT! Greetings Andreas