Question How to determine renewal period for ACME SSL?

[D3nnis3n]

Server operating system version

Ubuntu 24.04

Plesk version and microupdate number

18.0.77

Hello,
ACME SSL notes it can renew certificates before expiration - I'd like to have it renew on the first of every month for all domains, no matter their expiration date.
How can I achieve this?

This used to be possible with the Let's Encrypt extension and a config setting for it in the past, but since SSLIt! was introduced unfortunately didn't work anymore.
The setting is still there for SSLIt!, but it's not possible to determine the day of renewal anymore as it was possible via cronjob for Let's Encrypt extension.

 

[Sebahat.hadzhi]

Hi, @D3nnis3n . Currently, there's no option to execute the renewal at a specific date, however, our team is working on implementing more option in the SSL It! cli for further optimization. As a side note, it is worth to mention that such action could increases the risk of hitting rate limits.

At the time being, the option we can suggest is to use the renew-before-expiration option in panel.ini that allows you to define how may days prior to expiration the SSL renewal should be attempted. For example:

[ext-sslit]
renew-before-expiration = 30

 

[D3nnis3n]

Thank you, that is what we actually already have set.

We'd personally appreciate if more configuration options would be possible, including determining the renewal schedule.
I understand your concern about rate limits, but we're one of those clients you probably don't really want to see anymore (assumed from your constant pricing changes), so we do not have an amount of domains to be secured where that would be a problem. It would also be easily avoidable by simply being able to determine the desired renewal schedule for every domain like I'm used to in other software contexts.

 

[Sebahat.hadzhi]

Thank you for the feedback. At this point, I cannot provide an ETA for when the new cli options will be introduced, but the target is along with Plesk 18.0.78.