Restart needed if using LetsEncrypt?

[Kukulkano]

Hi,

I implemented LetsEncrypt usage very similar to the official example here: echo: Auto TLS Recipe.

LetsEncrypt should regenerate the certificate a few weeks before the current one expires. Do I need to trigger that? Or is it done automatically?

If it happens automatically, do I have to restart the app to use the re-created certificates at some moment or is this replaced/renewed automatically "on the fly" without any additional interaction needed? I know that Apache servers need to become restarted by a cronjob to make this work. Is it the same here?

In order to find out, I would have to wait for at least two months now :-(

Does anybody know, how this is handled?

[aldas]

Echo uses https://pkg.go.dev/golang.org/x/crypto/acme/autocert for Auto TLS. I guess autocert does reneweal by itself.

https://github.com/golang/crypto/blob/70a84ac30bf957c7df57edd1935d2081871515e1/acme/autocert/autocert.go#L132

// RenewBefore optionally specifies how early certificates should
// be renewed before they expire.
//
// If zero, they're renewed 30 days before expiration.
RenewBefore time.Duration

[Kukulkano]

Thanks Aldas, but this re-creates the certificate (maybe storing in cache folder). But it is not saying that the new certificate is also loaded and used by my server and it's new connections. And this is what I need to know.

[Kukulkano]

I waited long enough and now I can tell you that the echo framework (and so the app) does not need a restart. Updated LetsEncrypt certificates are used on the fly.