The cert_duration
parameter specifies the renewal period for SSL/TLS certificates. This duration determines how frequently the certificates are renewed to ensure that your applications remain secure.
The default value for cert_duration
is 2160h
(90 days).
To set the cert_duration
parameter, use the following command:
$ convox rack params set cert_duration=4320h -r rackName
Setting parameters... OK
This command sets the certificate renewal period to 180 days.
The renewal period for SSL/TLS certificates is crucial for maintaining the security of your applications. Shorter renewal periods can enhance security by ensuring that certificates are updated more frequently. However, this might increase the administrative overhead. Balance the renewal period with your security and operational needs to determine the optimal cert_duration
value.