The Certificate Authority Browser Forum has officially blessed us with the internet equivalent of mandatory daily dental flossing: SSL certificates that expire every 47 days by 2029. That’s right. The same certificates that currently give you a comfortable 398 days to procrastinate are about to need replacing—to abuse my dental hygiene conceit—more often than your
I feel sorry for those admins who have to deal with devices that don’t support acme or an API to upload new certificates.
Been a long time since I did this sort of thing, but isn’t there a modern equivalent of “expect” that can be used for that?
That assumes the device has a cli.
I have seen some gear so bad that no amount of sleep() in a script will make automation work.