Let's Encrypt

Trond Endrestøl trond.endrestol at ximalas.info
Tue Sep 10 08:08:48 UTC 2019


On Tue, 10 Sep 2019 07:52+0700, Victor Sudakov wrote:

> Trond Endrestøl wrote:
> > 
> > #minute	hour	mday	month	wday	who	command
> > 
> > 52	4	1	*	*	root	certbot renew --quiet --pre-hook "service apache24 stop" --post-hook "service apache24 start"
> > 52	1	15	*	*	root	certbot renew --quiet --pre-hook "service apache24 stop" --post-hook "service apache24 start"
> 
> Is it safe to run certbot as root? 

It needs access to TCP port 443 to run some checks. Hence the need to 
stop and start apache or you other regular webserver.

-- 
Trond.


More information about the freebsd-security mailing list