Skip to content

CA metadata does not seem to be cached? #403

@uschwarz

Description

@uschwarz

I see lots of requests to my CA even when nothing in the server config changes (or rather, my CA complained to me that I cause 100k requests per day).

It appears mod_md will fetch the directory file to see if the CA supports ARI, for every certificate, every time it checks if renewals are needed? The number of certificates on my server (cluster) is in the high three digits, for reasons, so I see how that would add up.
The directory file check should probably only happen once per CA per potential renewal run, or maybe even set a flag in the account.json that is only updated if we actually want to send orders?

(FWIW, I've disabled ARI for the time being, my CA doesn't support it anyway.)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions