-
Notifications
You must be signed in to change notification settings - Fork 29
CA metadata does not seem to be cached? #403
Copy link
Copy link
Open
Description
I see lots of requests to my CA even when nothing in the server config changes (or rather, my CA complained to me that I cause 100k requests per day).
It appears mod_md will fetch the directory file to see if the CA supports ARI, for every certificate, every time it checks if renewals are needed? The number of certificates on my server (cluster) is in the high three digits, for reasons, so I see how that would add up.
The directory file check should probably only happen once per CA per potential renewal run, or maybe even set a flag in the account.json that is only updated if we actually want to send orders?
(FWIW, I've disabled ARI for the time being, my CA doesn't support it anyway.)
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels