Switching to Let's Encrypt

leehinde

What's the wait time for a Let's Encrypt cert? My customer let their cert expire (ok, I didn't catch it either) so I'm backfilling with Let's Encrypt.

leehinde

About 15 minutes. :-)

sean

I came here to say that ⬆️ - sometimes less if the planets are aligned just right. 🙂

We're doing a lot of work on the backend to speed up the control loop that generates certificates and deploys all of the other dashboard stuff out to the web and mail servers, you can expect these speeds to get better! 🚀

leehinde

I have a customer using a cert that expires in about two weeks and I want to transition them to Let's Encrypt. Will there be down time? Or will the web user just see the old cert one minute and Let's Encrypt the next? I'm guessing that, but I'd rather not guess. :-)

sean

leehinde Nope, just flip the switch! 😎

We've reduced the time it takes to generate a new certificate quite a bit, so we'll generate the new certificate within a minute or so and then swap it out with the old one with no downtime at all.

Note that if your customer's domain is using Cloudflare or a similar CDN for DNS then be sure the turn off any HTTPS redirects you might have configured at that end prior to enabling LE - this is necessary because we have to do the LE verification stuff over regular HTTP. If you want to keep HTTPS redirection active then you can do so via the "Encrypt All Traffic" option for your site in your Opalstack dashboard.

Be sure to this before the current certificate expires! Once it's done, we'll automatically renew your LE cert for you as needed 🙂