topic Re: ACME and SSL decryption in General Topics

ACME and SSL decryption

itassetbenilde — Tue, 15 Apr 2025 02:25:34 GMT

So i recently got wind of this:

https://www.thesslstore.com/blog/47-day-ssl-certificate-validity-by-2029/

acme.sh and/or certbot takes care of the servers, but won't this break existing SSL decryption rules?

Any strategies/workarounds for this? tia

Re: ACME and SSL decryption

OtakarKlier — Tue, 15 Apr 2025 18:53:04 GMT

Hello,

Yes an expired certificate will give users with cert errors. If you have internal certificate servers for active directory, use that instead since all the machines will already trust it. You can generate a self signed certificate from the firewall and copy it to all the clients so they accept it.

Regards,