ACME and SSL decryption

[itassetbenilde]

So i recently got wind of this:

https://www.thesslstore.com/blog/47-day-ssl-certificate-validity-by-2029/

acme.sh and/or certbot takes care of the servers, but won't this break existing SSL decryption rules?

Any strategies/workarounds for this? tia

[OtakarKlier]

Hello,

Yes an expired certificate will give users with cert errors. If you have internal certificate servers for active directory, use that instead since all the machines will already trust it. You can generate a self signed certificate from the firewall and copy it to all the clients so they accept it.

Regards,